Quick AD question

[BOFH1]

I have been organising our users and compuers into OU's in Active Directory, i have also have quite a few groups that currently reside in the defult users container along with the built in groups is it a good idea to move them out of there just for ease of locating them or are they best left in there.

Any opinions on how you organise users and groups in AD would be appreciated.

Thanks.

 

[markdmac]

Either scenario is fine, the groups can be accessed by AD no matter where you put them. The main consideration for you would be how much manual intervention do you need to make on them?

If you have a large number of groups and have frequent changes to them, then yuou might want to move them to a seperate container for the visual streamlining of it. I personally just use the Search feature to get to them quickly.

I also avoid going into the groups themselves most of the time by simply doing the adds/removals when I am creating/modifying a user ID. I do it through the member Of tab rather than going into the individual group. that way I can add multiple groups at once for a user.

A main consideration I think is for scripting. Do you do scripting of AD? If so, you may want to seperate your groups just so you can hone in on them at a container level, but even this is not necessary.

I hope you find this post helpful. Please let me know if it was.

Regards,

Mark

 

[BOFH1]

I occasionally use scripting in AD mainly for bulk reseting of passwords tho.
I have noe moved my groups into other containers as it does make them easier to find.

Thanks.