Dear all, is it possible on Samba AD to hide certain attributes (such as the home address etc) from all authenticated users and have only certain groups read and write that ? What would be the recommended way? Would it be different from Windows only AD? I have read about the confidential flag, about property sets, ... only to feel more confused. Thanks for any insights, Christian