Re: huge user OU

From: Jeff Senter (jsenter_at_erols.com)
Date: 06/10/04


Date: Thu, 10 Jun 2004 19:11:59 -0400

Asking around, they are plaing on have around 100 to 150 people with
admin rights and somewere between 25 and 200 machine OU that they can
apply differant polocies to. They are assuming that they thay can apply
GPO to people based on which OU there workstation is in.

Simon Geary wrote:

>As a rule of thumb there are two reasons to divide your users into different
>OU's. If they will have different Group Policies applied; and if you will
>use delegation of administration to allow different users to administer the
>accounts.
>In your case, if all users will be given the same Group Policies and the
>same admins will be responsible for the accounts then there is no problem
>having that many users in one OU, although searches will take a little
>longer.
>The less OU's the better, in my opinion, as it keeps things simple. I don't
>think large numbers alone would justify creating more than one OU.
>
>"Jeff Senter" <jsenter@erols.com> wrote in message
>news:OgjsOlVTEHA.760@TK2MSFTNGP12.phx.gbl...
>
>
>>I do some consulting for an University and they are planing on haveing
>>all of the users in one large OU. The plan on breaking the machines up
>>in to smaller OU. THey belive that thay can manage this thoug GPO
>>easily with this configuration. SOme thing tells me this is not going
>>to work well but I can not put my finger on it. Or am I wrong am this
>>configuration will work just fine.
>>
>>
>>
>
>
>
>



Relevant Pages

  • Re: huge user OU
    ... use delegation of administration to allow different users to administer the ... if all users will be given the same Group Policies and the ... same admins will be responsible for the accounts then there is no problem ... configuration will work just fine. ...
    (microsoft.public.win2000.active_directory)
  • Re: huge user OU
    ... use delegation of administration to allow different users to administer the ... if all users will be given the same Group Policies and the ... same admins will be responsible for the accounts then there is no problem ... > configuration will work just fine. ...
    (microsoft.public.win2000.active_directory)
  • RE: Spying in a corporate environment
    ... If you have a 2003 domain enforce group policies and restrict access to ... As long as they have admin rights you don't have control, ...
    (Security-Basics)
  • Re: Links not working for user
    ... Manual fix: Start/Run/Regedit ... Is there a quick view of any group policies that have been ... have admin rights on the server as ...
    (microsoft.public.windowsxp.general)
  • Re: Links not working for user
    ... Taskbar Repair Tool Plus! ... Is it for tis only user or affects all users on the same machine? ... How can i see what group policies have been enabled on this ... have admin rights on the server as well. ...
    (microsoft.public.windowsxp.general)