[Samba] How to create an user with isCriticalSystemObject or/and showInAdvancedViewOnly

Rowland Penny
Wed, 21 Jul 2021 17:43:49 -0000

On Wed, 2021-07-21 at 17:29 +0000, * Neustradamus *
wrote:
> I would like to hide an account at creation with
> isCriticalSystemObject or/and showInAdvancedViewOnly.
>
> If the command does not exist, maybe time to add?
>
> For security reasons...
>

I am fairly sure you cannot hide an individual AD object, I believe you
can stop a user from seeing certain AD objects, but you would have to
do this for every user. It also wouldn't stop anyone on a Unix domain
member (at least) from searching for them with ldap tools (ldapsearch
etc)

Rowland