Dan,

 

Thanks for the quick response, here is where I’m at now although I’ve made progress.

 

I have removed the user from the Configuration Administrators group, and I have created an ACI that allows all to a specific OU under my domain root (ou=OU,dc=domain,dc=com). That being said, now when I logon to the management console as that administrative user, I don’t see the root domain, all I see under the Directory tab is “schema”, “monitor” and “config”. I think I’m really close and I’m still messing around with ACI’s, but is there anything you can point out that I might be doing wrong?

 

Thanks,
Daniel