We have several customers in our Domino directory. There are about 30 OU:s and the number will grow up to 100 and more. There problem is that the (power) users should be able to administer their own:n OU:s users (change password, move in/out to groups etc) but not even read the others.
We have planned to move our users in multiple directories, each OU in their own directory and set up ACL:s properly. There are both client and web users.
Is there anything which might become problem if we have so many directories? Is there limits for number of directories? What other ways to handle this we should consider?
Subject: RE: You may want to investigate ND6’s extended access control instead of multiple directories
Hmm…
We run ASP-service, so we would like to restrict people from opening the address book and finding out who else is listed there. So one option would be to use readers -fields in Directory, but that would mean to change the design for Directory.