7 limit the amount of information about users visible for domain administrators