Re: OU design

From: C Hall (anonymous_at_microsoftforums.com)
Date: 07/08/04


Date: Thu, 8 Jul 2004 15:41:59 -0400

Hi George,

As Mark said in his post, OUs are the way administrators manage users and
computers...users won't be able to see this logical configuration unless
they can access the A.D Users & Computers snap-in, which you can stop them
from accessing through GPO.
Chris
"George" <haubica@hotmail.com> wrote in message
news:%23bzAYeRZEHA.212@TK2MSFTNGP12.phx.gbl...
> Thanks for your replies. I agree OU will be my view. But, also I am
confused
> as users can navigate to the AD in the My network places and see the same
> view as I can in MMC for users and computers. Is this how it is supposed
to
> be?
>
> Also, what is the best way to deploy the policy. to users or machines and
if
> you have 2 policies applied, one for machine and one for user what will
> happen?
>
> Thanks, George
>
>
> "Mark Scott" <m@rk-5c0tt@8lu3y0nd3r.c0.uk> wrote in message
> news:e6DBrWRZEHA.212@TK2MSFTNGP12.phx.gbl...
> > Think about what policies you want to deploy and who needs to get them.
> > Split the users away from the computers and then by site (or the other
way
> > about IE site first) that way you can have fine control over policies.
> >
> > OUs = management groups, nothing more. They are an admin's eye view of
> the
> > network.
> >
> > Regards
> >
> > Mark
> >
> > "George" <haubica@hotmail.com> wrote in message
> > news:eH4dOORZEHA.1448@TK2MSFTNGP12.phx.gbl...
> > > Hello All!
> > >
> > > we are still on NT domain and I am in process of designing the AD at
> this
> > > moment. I have been working on this design for a long time and
devoting
> a
> > > lot of time to OU design. I believe domain, site and forest
> > > characteristics
> > > are simple so it will be single forest, domain and 3 site design. We
> have
> > > 3
> > > physical locations that are connected by private T1 lines. 2 in
Chicago
> > > and
> > > one in Texas. one in Chicago and one in Texas will have Exchange 2000
> > > servers. Now dilemma is still with OU as more I read and develop and
> think
> > > about it, more I am not sure what to do and how to organize it. Is
there
> a
> > > check list or a model or some kind of tool to use and aid in this
> process?
> > > I
> > > would like to have some additional OUs that will separate desktops,
> > > laptops,
> > > executive, user and admin just to accommodate different GPO that I
might
> > > have in the future.
> > >
> > > Please help. George
> > >
> > >
> >
> >
>
>



Relevant Pages

  • Re: D3/NT Network
    ... Mark, ... Once communications has been established between the two machines you can: ... Once the host has been established, you can even use syntax such as ... Can anyone give me any practical uses for setting up a D3 network? ...
    (comp.databases.pick)
  • Re: XP Home Network Question
    ... LAN as long as things are setup correctly. ... On both machines, launch a command prompt. ... "Mark Test" wrote in message ... >> tell XP the exact IP address of a computer on the network? ...
    (microsoft.public.windowsxp.basics)
  • Local Security Policy Being Changed?
    ... Several XP machines on our network are having their Local ... Security Policies changed that is ultimately preventing ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Home Directory Mapping
    ... >on particular machines on the network. ... Can I do this using policies? ... You can have a logon script for the OU that ...
    (microsoft.public.win2000.active_directory)
  • RE: Domain vs. Local security policy
    ... the only problem with that scenario is that if you wanted to change the policies of the local machines without affecting other PCs on the network, or having to stick them into a separate OU. ...
    (Focus-Microsoft)