add contact tenant isolation - W08-DWHO.64 RRS feed

  • Question

  • Hello,

    I'm having a hard time understanding the bellow for contact tenant isolation, can anyone guide me through it? Much appreciated

    Procedure W08-DWHO.64: To add contact tenant isolation

    1. On AD01, run Active Directory Users and Computers and expand your domain. Note that you need to ensure you have "View Advanced Features" enabled.

    2. Configure advanced security settings. Remove the following rights:



      Applies to

      Authenticated Users

      Read RTCUserSearchPropertySet


      Authenticated Users

      Read RTCUserSearchPropertySet


    Tuesday, April 28, 2009 11:22 AM

All replies

  • Hi,

    1. In dsa.msc console right click on the Domain Name (example.: lab.local) and click Properites
    2. Click Advanced button in Security tab.
    3. Select Permission tab and short the list by Name field.
    4. Browse two Authenticated user's entry who has  "Apply To" field contain "Descendant User Object" and "Descendant Contact objects"
    5. click Edit.. button each entry and Remove these rights.

    Wednesday, May 20, 2009 2:43 PM
  • Zolee,
    Thanks for your help.

    I have another issue, now when i search a contact using the "company" field, it never returns anything, i can however search using First Name and Last Name.
    Saturday, May 23, 2009 11:58 AM