Re: huge user OU

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Alex Tarata (alex_at_claex.com)
Date: 06/08/04 

Date: Tue, 8 Jun 2004 23:09:08 +0930

It just depends on the accounts that will be placed in that OU Jeff. If they
will place 50,000 students that should have the same GPO applied then
everything should be fine. If however they are not planning to do this then
things could turn messy. For example: if they put all staff accounts and
all the student accounts in one place then it will be a nightmare applying
different GPOs to different accounts.

But by the sound of it they will not do that since they are splitting some
computers in different OUs.

A good thing is to have a look on the Microsoft website and see some
documentation about Active Directory design and present them with this. I
have read quite a few documents and seen heaps of AD implementations and
never seen ALL the users in one OU.

This does not sound good but unfortunatelly is an unfortunate thing
nowadays: wrong people given the responsibility of working on Active
Directory. :-)

"Jeff Senter" <jsenter@erols.com> wrote in message
news:OgjsOlVTEHA.760@TK2MSFTNGP12.phx.gbl...
> I do some consulting for an University and they are planing on haveing
> all of the users in one large OU. The plan on breaking the machines up
> in to smaller OU. THey belive that thay can manage this thoug GPO
> easily with this configuration. SOme thing tells me this is not going
> to work well but I can not put my finger on it. Or am I wrong am this
> configuration will work just fine.
>

Relevant Pages

  • Re: Proxy Settings
    ... A GPO is logically made up of two sections - Computer Configuration and User ... Settings under User Configuration affect user accounts the ...
    (microsoft.public.win2000.active_directory)
  • Re: GPO not taking affect
    ... A GPO is logically made up of two sections - Computer Configuration and User ... Settings under User Configuration affect user accounts the ...
    (microsoft.public.win2000.group_policy)
  • Re: Workstation LockDown
    ... A GPO is logically made up of two sections - Computer Configuration and User ... Settings under User Configuration affect user accounts the ...
    (microsoft.public.win2000.group_policy)
  • Re: Loopback policy enabled, seems to cause login script to run twice
    ... GPO containing it applies to, regardless of which actual GPO it is included ... the description of how Loopback processing works is NOT ... enables loopback processing appears and where the relevant computer accounts ... Sounds like you have included the setting that runs the Logon Script so high ...
    (microsoft.public.windows.group_policy)
  • RE: LDAP issues - mimesweeper for web & Active Directory
    ... It would just import members of the Internet Access Allowes ... How do you rate you GPO skill 1 to 10? ... GPO to an OU that has User objects/account as opposed the Comuter accounts. ... LDAP for the OU: ...
    (microsoft.public.windows.server.active_directory)