JSI Tip 3275. How can I allow users to search the Active Directory, but NOT casually browse?

The Hide Active Directory folder policy (User Configuration\AdministrativeTemplates\Desktop\Active Directory) hides the Active Directory folder in My Network Places.

If the policy is Not Configured, you can use Regedt32 to navigate to:

KEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Directory UI

NOTE: You may have to add the Windows and Directory UI keys.

On the Edit menu, Add Value name HideDirectoryFolder, as a REG_DWORD data type. Set the data value to 1.

NOTE: If you add HideDirectoryFolder, you must also add it at:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Policies\Microsoft\Windows\Directory UI.

NOTE: You might find it easier to run Merge the following .REG file with the user's registry:


\[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Policies\Microsoft\Windows\Directory UI\]

\[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Directory UI\]

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.