Re: OU level

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 07/07/04 

Date: Tue, 06 Jul 2004 20:26:43 -0400

Location of the domain users group has no bearing on what rights it bestows.
Basically look at permissions on objects and anywhere where you see domain
users, that means anyone in that group gets that access.

   joe 

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
anonymous wrote:
> Hi all,
> I orginially setup my users under the users OU.  Now I 
> realize that I needed to create an OU at the same level 
> as users so that I could add a group policy. (I now have 
> the group policy running under the entire domain). I want 
> to be able to put all my users say in a OU called NTusers
> and leave the admin account under users then move the 
> group policy from the entire domain to only the ntusers 
> OU.  All my users are members of domain users.  My 
> question is would I move domain users group under ntusers 
> along with all my other groups that are setup such as 
> wins, dhcp ect or should I leave them under users?  I'm a 
> little confused on just what rights a member of the 
> domain user group inherits. 
> Thanks in advance for any help on the best way to have a 
> group policy but not include admin and domain admins.
> Sherry

Relevant Pages

  • Re: best way to install apps when logged in user is domain user only
    ... it's preferable to use Group Policy ... computer startup scripts (which run in the context of the machine and hence ... >I need assistance on the best way to give a regualr admin rights to install ...
    (microsoft.public.win2000.general)
  • RE: Critical: Group policy overwrote ...all users My documents on
    ... rights only), a system file with only Admin rights. ... > creation of the directory on first redirection permission it ... >> After the initial setup I instituted group policy on the server to redirect ...
    (microsoft.public.windows.server.active_directory)
  • Re: User Rights Conflict On Folder/SubFolder Access
    ... I have decided to take the advice to create a new security group and put the ... using the Domain Users group settings - fortunately, ... I am attempting to deal with the situation via user rights, ... My problem is with a conflict between the Inhouse AdminTeam Group and the ...
    (microsoft.public.windows.server.sbs)
  • Re: AD tools not functioning
    ... I have set myself with Domain admin, ... rights and assigned the Group policy owner right. ... >> try to edit a group policy, ...
    (microsoft.public.win2000.active_directory)
  • Active directory structure for users
    ... I originally setup all my users under the default users container. ... Now I want to assign security rights by the OU but when I go to a ... I was assigning rights by using the domain users group but I have a need to ... Will the vendor user still be able to login without ...
    (microsoft.public.win2000.security)
Loading