We have several domain users (non admins) who, using a VISIO template, could actually enumerate users, machines, and OUs from AD! How is this possible? From a security perspective I thought that only Domain Admins would have this capability.
TIA,
edm2
P.S. We are at Windows Server 2008 R2 domain functional level.