ADS - How to assign a group to OU

[MrBedo]

Being fairly new to active Directory this one has been bugging me for a while.

How can I assign a security group to an OU so that any user created or added to that OU also becomes a member of that security group ?

Here's an example of what's happening at the moment:

I have an OU called Accounts. In that OU I have two users, jsmith and hjonson. If I right click the OU and 'Add Members To A Group' and then add the 'Accounts' security group, jsmith and hjonson become members of the 'Accounts' security group. However, if I then create a new user in the Accounts OU called 'mjones', that user does not automatically become a member of the Accounts security group. I have to go through the process of right click the OU and 'Add Members To A Group' etc again before this happens.

Am I missing something here ? Is there a way to permemantly associate a security group with an OU so that whoever gets put in that OU also becomes a member of that security group ?

thanks in advance for any help

 

[Seaspray0]

Not that I have seen. OU's are there for administration purposes... delegating administrative rights to manage accounts and for assigning group policies to select users and computers.

If you are creating users in this OU with the same memberships on a repeated basis, you can consider creating a template user with the memberships you would expect for this OU. Copy the settings from the template user to the user you are creating.


Start, Help. You'll be surprised what's there. A+/MCP/MCSE/MCDBA

 

[58sniper]

If your AD is in native mode, I think you could create a query based group. In theory, anything in that OU would be a member then. But I'd go the template route.

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)

 

[wo1wo1]

I would create a template called security group users add the new group to the security group, when you create a new user just use this template and the user will be in the security group.

 

[MrBedo]

Thanks for the feedback, I'm glad in a way that it's not just me being dense !

I'll go down the template route then, seems to be the most straight forward.

thanks again