Modify access rules
diff --git a/groups b/groups
index c2d5f8e..3b446ab 100644
--- a/groups
+++ b/groups
@@ -2,4 +2,6 @@
 #
 global:Anonymous-Users 	Anonymous Users
 global:Registered-Users	Registered Users
+ldap:everyone          	ldap/everyone
+ldap:nobody            	ldap/nobody
 mdb:dynamic-tools      	mdb/dynamic-tools
diff --git a/project.config b/project.config
index bd7b927..db16a78 100644
--- a/project.config
+++ b/project.config
@@ -7,3 +7,6 @@
 	read = group Anonymous Users
 [access "refs/for/*"]
 	push = group Registered Users
+[access "refs/heads/*"]
+	create = deny group ldap/everyone
+	create = group ldap/nobody