Re: AD Structure
From: Tomasz Onyszko (T.Onyszko_at_w2k.pl)
Date: 07/30/04
- Next message: Feng Mao: "Re: Import Users into Active Directory"
- Previous message: Matjaz Ladava [MVP]: "Re: AD Repair tools?"
- In reply to: Frater: "AD Structure"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 30 Jul 2004 10:11:05 +0200
Frater wrote:
> What kind of structure is the best, i actually think about a tree
> named Euro.mycompany.com with some OU (Fr/It/UK etc ...)
This looks good but we don't know much about Your organization structure
- are those companys in other country separate company or the subsidiary
of Your organization.
Do they have their own IT department which is in charge of their network
or You are doing this from France?
> Another possible is some tree, one for each country, to eventually
> delegate full admin control to these country ?
You can delegate control over the AD objects on OUs level
>
> It seems that the first design (OU only) have some right issue with
> the Exchange 2003.
I don't know bout some issues - what can be a concer here is the
visibility of OU's and users in GAL in each country. Do you want users
for example in Italy can see OU with objects from France and other
country or not?
As I said if You are in charge for AD in all of these companys and You
will manage whole AD and the IT dept in particular country will do some
tasks only on the AD objects in their country - the design with OU can
be good.
But there can be other concerns which comes for example from Your
organization structure, from different security policies in each countr
(for example different password policy in each country) which may put
Your design into spearated domain tree.
-- Tomasz Onyszko [MVP] T.Onyszko@w2k.pl http://www.w2k.pl
- Next message: Feng Mao: "Re: Import Users into Active Directory"
- Previous message: Matjaz Ladava [MVP]: "Re: AD Repair tools?"
- In reply to: Frater: "AD Structure"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|