RE: Placement of computer objects in AD

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Desmond Lee (mcp_at_donotspamplease.mars)
Date: 02/01/05 

Date: Mon, 31 Jan 2005 21:07:03 -0800

Segregation of computer and user objects into different OUs allows better
definition and application of Group Policy Objects (GPOs) to the intended
target. This can even be further broken down for granular control.

e.g.
domain.com
--- Servers OU
--------- File OU
--------- Terminal Server / Citrix OU
--------- Database Server OU
etc.

The GPO loopback feature is an option for consideration as well.

Do let us know if this helps. Thanks.

"Ageing Brilliantine Stick Insect" wrote:

> I have been advised that I shouldn't put computer objects in the same OUs as
> the people who will be using those computers. (I found the other day that
> some Group Policy settings weren't being applied to computers in our domain
> coz those computer objects were in the default 'Computers' OU in our
> AD.....seemed logical to put those computers in the same OUs as their users)
>
> Can anybody tell me why computers shouldn't be in the same OUs as their
> users, and does anybody know of any good articles on this subject?

Relevant Pages

  • RE: Deploy SP2 with Active Directory and GPOs?
    ... In a Windows 2000 or Windows 2003 based domain, ... Group Policy is stored as part of Active ... publish programs to users or computers in the Windows 2000 or Windows 2003 ... After the installation files have been prepared, ...
    (microsoft.public.windowsxp.general)
  • Re: SITE LEVEL AND DOMAIN LEVEL PLICIES
    ... GPOs that are linked to Active Directory site objects affect all ... any Group Policy object that is ... linked to a site is applied to all computers in that site, ... regard to which domain (in the forest) contains the computers. ...
    (microsoft.public.win2000.group_policy)
  • Re: Installing Service Packs
    ... NTFS permissions and - in this particular case - Domain Computers Read on ... account objects that need to have SP4 installed into this OU. ... an OU to which a GPO that installs software is linked, ... So, right click the OU, select Properties and go to the Group Policy tab. ...
    (microsoft.public.win2000.group_policy)
  • Using GP to deploy service packs
    ... Assigning Service Pack 4 to Computers ... Create a shared network distribution folder. ... Create a group policy for SP4 deployments. ...
    (microsoft.public.windows.server.general)
  • Re: Group policy issue
    ... unfortunately they are people, not computers. ... you will see on unapplied GPO list, but is applied on computers and you ... MCSA Windows 2003 server ... Applied Group Policy Objects ...
    (microsoft.public.windows.server.networking)