We are testing SPAM/Virus cloud solutions and they can read active directory users and groups to help with users set-up and configuration. All they need from me is a user name, a password and the port opening up on our firewall. By giving them a user name and password to access the active directory, what am I opening up on my network? Would the cloud solution be able to read passwords? What exactly can they see? Can I reduce what objects they can see?
Our server is Windows 2008 sbs.