How to hide mail-enabled distribution list memberships

Technically this is possible by natively blocking access to the 'members' attribute by way of a property-level "Deny" ACE on each DL.

Would I recommend you do this?

No because you would be forcing yourself to keep track of which DLs you've done this for - i.e. a record-keeping problem.

Technically this is possible by natively blocking access to the 'members' attribute by way of a property-level "Deny" ACE on each DL.

Would I recommend you do this?

No because you would be forcing yourself to keep track of which DLs you've done this for - i.e. a record-keeping problem.

I don't think that is what the original poster is after. In Exchange there is a setting where you can choose to hide the membership from a DL in the Address book. How can that setting be set in One Identity Manager?