active directory staff and students. limit reading of records.

we are just about to impliment open directory for all students and staff on one server. then use replicates for file sharing. my question is when i hook up web components to the ad to search for staff tel nos, building info etc i do not want to be able to browse any student records. all students wil have uid greater than 5000 and all staff will be 1000-5000. is there any way to stop browsing of recorde if uid > 5000? sid