best practices for AD

[kaizer]

hello
testing nt4 to 2003 Ad inplace upgrade
RE: the computers/users folders
If i create an ou called MYOU, can i move the users folder to the ou or, do i have to create a "user" group in my ou and then move the user objects from the user folder into this new group?

 

[technome]

Create a group, add the needed members to the group, then add the group to myou. Do not move users to a created OU, unless necessary.

 

[Jpoandl]

When you say, "USERS FOLDER"????? I assume you mean the USERS OU...

You can not move the built-in default OU's. The USERS OU is a built-in default OU. You can not move this.

"do i have to create a "user" group in my ou and then move the user objects from the user folder into this new group?"

Congrats! This is the most confusing statment I've read today.

I don't know what you mean by "create a "USER" GROUP in my OU" I guess you mean "do I have to create a sub OU called USER under the MYOU OU"? This is, in fact, what you would need to do.

Create a sub OU called USERS and then move the appropriate users under the MYOU OU.

-hope this helps..





Joseph L. Poandl
MCSE 2003

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.NJCOMPUTERNETWORKS.com

(Sales@njcomputernetworks.com)

 

[mlichstein]

Users is not an OU at all. It is a container. The difference being, you cannot apply group policies to a container. Built-in and computers are also containers.

The rule for groups, users, permissions, etc is AGDLP

Accounts-->Global Groups-->Domain Local Groups-->Permissions.