proper organizational unit setup/examples

From: Anthony Tomah (atomah_at_middleboro.k12.ma.us)
Date: 04/01/04 

Date: Thu, 1 Apr 2004 09:30:33 -0800

My school district is slowly but surely moving to windows
2000 with active directory. We currently have 2 domains
with AD set up in domain "B", the student domain. We also
have domain "A", which is our administration domain and
will soon be collapsing it into the "B" domain sometime in
the near future. Domain "A" is an NT domain.
Our first issue is that we are not sure where to go from
here as to how groups are created. We desperately want to
use group policies, and I know that the term "group
policy" is a misnomer as they can not be applied to groups
but instead to sites, domains, and org units.
Knowing this, I'm trying to figure out how to set up our
user accounts to utilize group policies while still
placing students in groups, such as grade 1, grade 2,
etc. I do not necessarily want to create org units for
each and every grade but will if that is the only
alternative.
Are there any visual tutorials, free or otherwise, that
graphically shows me how to set up group sructures in
Active Directory in a school setting and then how to
create and apply group policies to those OU's?
I would like to see Microsoft create a webcast literally
showing users how to create these ou's that group policies
can be applied to and then also show "best practices" for
creating and implementing them as well.
For instance, We do not want to have students browse
the "hood", access the "C" drive or change any computer
setting but do not want them locked out of any program
installed on the machine either. This currently happens
with org chart in MS office 2000 when we use local machine
policies in win2k.
 As this is only 1 example, and I have more of them, it
would be nice to have a sample movie or website that
graphically shows you the steps to doing this right and
applied to the proper group.
Perhaps there are books out there that also this very
thing. I'm all ears for feedback.

Thank you.

Anthony Tomah
Director of Technology
Middleboro Public Schools
Middleboro, MA
  

Relevant Pages

  • RE: Auto-Configure Search For People in Start Menu?
    ... >the 'Active Directory' enabled as the default, ... >do it with Group Policies, with remote registry, or even with a WMI script? ... If you open the address book, you can import/export the Internet Accounts ...
    (microsoft.public.win2000.general)
  • Re: Automatically locking desktop after a certain period of time
    ... Since you're on Active Directory, force the use of a screen saver and a timeout and password requirement via Group Policies. ... These settings are in User Configuration, Administrative Templates, Control Panel, Display. ... > the computer automatically lock after a certain amount of time (like some ...
    (microsoft.public.windowsxp.security_admin)
  • User Permission?
    ... I am about to deploy a new set of XPProSP2 machines. ... I'd like to "lock" the profile down so that the user cannot change the ... How do I view/edit the Group policies on a local machine? ... In the absence of an Active Directory, how do I achieve what I want? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Publisher 2003 Crashes (NEED ASSISTANCE !!!)
    ... >I am running XP professional on an Active Directory ... > network in a school. ... > school workstations from Office 2000 to 2003. ...
    (microsoft.public.publisher)
  • Re: when to use OUs??
    ... Delegation purpose and since Group Policies can be linked to ... Design the Active Directory as how you want to mange Active Directory. ... No email replies please - reply in the newsgroup "mirko9" skrev i meddelandet ...
    (microsoft.public.win2000.active_directory)