Active Directory Question?

[suicidaltendencies]

I'm new to Active Directory and want to know the proper way of setting up OU's, Groups and users.

Should you create you OU's and add groups and users to them?

For example, if I had a IT department and Sales department would I create two OU's and create the groups within these OU's.

Can anyone point me to an area where they give real life situations and how to setup your OU's, groups and users?

Thanks,
Harold

 

[GuyThomas]

I am so glad that you are using multiple OUs, so many companies use multiple domain instead.

Two reasons to bear in mind when create OUs, delegation and group policy.

Who will administer your OUs?

The two traditional methods for the top level OUs are by Location (my favorite) or by Job Title (open to restructuring). My advice is then to have no more than two levels of 'nested' OUs, depending on the size of your company.

Once you have created your OUs then create the groups. Global Groups are generally most suitable. If you use Universal, 'Best practice' is to add only Global groups not individuals.

So remember Delegation, and be aware of how easy it is to Move groups if you do reconsider.

Here is more information on delegation.

http://computerperformance.co.uk/w2k3/W2K3_OU_Delegate.htm

Guy Thomas

Scripting Ezine

http://computerperformance.co.uk/ezine/newsletter_subs.htm