Re: Is it possible to have a user account in two OUs
- From: "Richard Mueller [MVP]" <rlmueller-nospam@xxxxxxxxxxxxxxxxxxxx>
- Date: Thu, 12 Jul 2007 12:22:49 -0500
Every object in Active Directory, including user objects, resides in one and
only one container/OU. Group Policies can be applied to OU's. Otherwise, it
doesn't matter where the user object resides, except to make it easier for
admins to find the object.
A user can be a member of any number of groups. Groups are used to grant
permissions and access to resources. It sounds to me like you want to place
your "External Users and Groups" in a group. Groups can also be members of
groups.
--
Richard Mueller
Microsoft MVP Scripting and ADSI
Hilltop Lab - http://www.rlmueller.net
--
"Myweb" <meiweb@xxxxxx> wrote in message
news:ff16fb66401988c992ce9747f408@xxxxxxxxxxxxxxxxxxxxxxx
Hello camille.reeves@xxxxxxxxx,
No, you can't. Every user account you create, get's his own Security
Identifier which is unique in the domain.
Best regards
Myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
My colleague and I are creating accounts for our "External Users &
Groups" OU in Active Directory. The issue is that there are 20+
users
in another OU called "FTP Customers" that we also want to put in the
External Users & Groups OU and we don't see anything in the AD menus
that looks like it would give us the capability to do so.
The "External Users & Groups" OU is for people who are important
associates of our company and/or board members so we would like to
add
(rather than move) the 20+ users from the "FTP" OU who fall into that
same category so that our AD reflects what users are External users
and what users are FTP customers since some of these users are both.
Another reason why we want to add them to the External group is so
that they keep the same logon credentials. At the moment in order to
"add" the user to the External group, we have to create a new login
which isn't really adding a user; it's creating a new one.
I'm getting the sense that it's not possible since OUs are containers
for user objects that makes AD look more organized but I haven't read
anything to the contrary or anything that would imply it's not
possible.
Can someone please tell me the right answer. It would be really
great
if any of you could point me in the direction of documentation that
talks about this too. I would appreciate it.
.
- Follow-Ups:
- Re: Is it possible to have a user account in two OUs
- From: camille . reeves
- Re: Is it possible to have a user account in two OUs
- References:
- Is it possible to have a user account in two OUs
- From: camille . reeves
- Re: Is it possible to have a user account in two OUs
- From: Myweb
- Is it possible to have a user account in two OUs
- Prev by Date: Re: Is it possible to have a user account in two OUs
- Next by Date: Re: restore user object that has been deleted 4 months ago...
- Previous by thread: Re: Is it possible to have a user account in two OUs
- Next by thread: Re: Is it possible to have a user account in two OUs
- Index(es):
Relevant Pages
|