Nearly nailed down the multi - tenant solution for CRM 4.0
Not using MPS.
Last step is to make sure that each seperate org can't view the whole domain tree when you go to add multiple users...or for that matter anywhere else I might not have seen it yet.
Anyways, I really only want a user to search through his own OU.
whe have a structure similar to this:
domain.com
+
Clients OU
+
domain1.com.au
+users
+groups
domain2.com.au
+users
+groups
Etc. So what I am after is a solution similar to WSS where you lock down the search OU to only
domain.com.au
+users
+groups