Re: Rename "Users" OU

Actually the user's container has a Well known GUID. The SID is a security
identifier - containers are not security principals, so no SID.

--
Thanks,
Brian Desmond
Windows Server MVP

www.briandesmond.com


"Paul Bergson" <pbergson@xxxxxxxxxx> wrote in message
news:uHhhc5WRGHA.4452@xxxxxxxxxxxxxxxxxxxxxxx
By default the users container isn't an Organizational Unit but just a
container for objects. I don't know of a requirement as far as the SID is
concerned (There is no well known ID that I know of it), that doesn't mean
someone else might know of one though. As a matter of fact there is a
best practices on OU's by Microsoft, checkout the link below.

I would definitely make sure you have a container (or OU) available with
the name of users before you create a new user in your domain though
unless during your creation you specify a new container for it to be
placed into.

http://support.microsoft.com/default.aspx?scid=kb;en-us;324949


--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
http://www.pbbergs.com/

This posting is provided "AS IS" with no warranties, and confers no
rights.


"Fred" <Fred@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2031BD09-07E9-4F82-8602-2D0C6E531ED4@xxxxxxxxxxxxxxxx
I need to rename the "Users" OU to something else and then create a new OU
called "Users."

The issue is that an application MUST hold its accounts in the users OU,
but
managing these accounts intermixed with domain users and and default
accounts
is getting very muddy.

Are there any problems with renaming the OU (and leaving all the "normal"
domain accounts in the new OU) and recreating the OU just for the sake of
the
application?

Thanks in advance!




.

Relevant Pages

  • Re: Rename "Users" OU
    ... By default the users container isn't an Organizational Unit but just a ... container for objects. ... I don't know of a requirement as far as the SID is ... The issue is that an application MUST hold its accounts in the users OU, ...
    (microsoft.public.win2000.active_directory)
  • Re: Question about containers and User Groups
    ... The email server is called SmarterMail. ... If it were really integrated with AD it would USE the AD accounts ... When it finds the user in the Users Container it ... called Computers. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Question about containers and User Groups
    ... The email server is called SmarterMail. ... If it were really integrated with AD it would USE the AD accounts directly. ... When it finds the user in the Users Container it ... Users) or OUs containing the Computer accounts (to affect the Computers.) ...
    (microsoft.public.windows.server.active_directory)
  • Re: Moving computers to another domain
    ... your scripts? ... However, the default container for computer objects in AD is a container, so ... For Each objComputer In objOldContainer ... >>> computer accounts now. ...
    (microsoft.public.scripting.wsh)
  • Re: script to retrieve active users that are not in a specific OU
    ... not buildin accounts ... not in an organization unit ... Administrator, Guest, etc. ... container, assuming that is the only container in your domain with users. ...
    (microsoft.public.windows.server.scripting)
Quantcast