RE: DC in Active Directory Users and Computers
From: Stivie S. (stefan.suesser_at_computacenter.com)
Date: 04/08/04
- Next message: Stivie S.: "RE: Utilizing two domain controllers for fault tolerance"
- Previous message: Dmitri Gavrilov [MSFT]: "Re: NTDS SDPROP error after upgrade to Windows 2000"
- In reply to: Steve Thompson: "DC in Active Directory Users and Computers"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 8 Apr 2004 14:56:06 -0700
Hi Steve,
it is definitely OK to move DC computer accounts to a different OU. Microsoft recommends to let them in the default "Domain Controllers" OU, but the only reason behind that is that it makes sure that all DCs receive the same Group Policies and delegation rights.
If you want to move the DC accounts, just make sure that you link the "Default Domain Controllers Policy" and all other Group Policies you create to all OUs where your DC accounts reside in.
As our DCs have also some other functions, we also moved them to location-based OUs in our AD. If you take care of the Group Policy links and their order, there is nothing to worry about.
----- Steve Thompson wrote: -----
Is it okay to move the DC computer accounts from the
built-in Domain Controller container. I've created my own
Organization Unit Hierarchy and would like to move them
accordingly into my new scheme.
Thanks,
Steve Thompson
sthompson717@hotmail.com
- Next message: Stivie S.: "RE: Utilizing two domain controllers for fault tolerance"
- Previous message: Dmitri Gavrilov [MSFT]: "Re: NTDS SDPROP error after upgrade to Windows 2000"
- In reply to: Steve Thompson: "DC in Active Directory Users and Computers"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
