I am new to AD, can someone show me to steps to check if an account has permission to Query AD? Does by default a domain user have such a permission?thanks,

Hi Yang,Yes, by default all domain users have Read-Onlypermission to do query or verify allmost everything in Active Directory and if they install Windows Support Tools which includes ADU&C then they can check anything in read only mode.However this is Exchange Server - Admin forum, suggest you to use Windows Forum to get faster and better responses from the Windows/AD experts.Windows Forum:http://social.technet.microsoft.com/Forums/en-US/category/windowsserver/Amit Tank || MVP - Exchange || MCITP - Exchange 2007 || http://ExchangeShare.WordPress.com