I have that, but not what im looking for, what  Im looking for is manager of domain aaa.com can only manage quarantine for domain aaa.com and manager of domain bbb.com can only manage hose quarantine, and then create a NOC user that should be able to...

So your saying to setup multiple LDAP groups, because we have 6 domains of sub-companies, and only using one AD with 6 different OU's but I setup 1 query... I have 2 8.5.6 so i guess i will try with DR site.Thanks

Is this now possible??? with ESA boxes