In my home lab I'm trying to reduce the scope of executed PowerShell scripts.
My Active Directory organization unit (OU) structure looks like this:
Customers Customer1 users groups servers Customer2 users groups servers
Executing the command:
wmic useraccount get name
Lists all user accounts in my Active Directory.
I want to reduce the scope of the OU. Users in the OU "Customer1 > users" should only be able to retrieve users in the same OU.
Modification of the OU security settings resulted in not applying several GPOs.
How can I achieve this ? Is there a best practice ?