title: Restricting ADFS 2.0 to use a specific OU instead of Domain level access
body: <p>Consider the below Sample Scenario:</p>
  
  <ul>
  <li>I have a Single Active Directory Domain for Production, Test and for development (each separated  at OU level).</li>
  <li>I want to install ADFS at test OU level and I do not want users authenticated at test OU ADFS to have access (both read and write) to other OU's.</li>
  </ul>
  
  <p>Can this be possible ? Can we restrict ADFS 2.0 to work only under a particular OU ? </p>