Re: Is it possible to have a user account in two OUs



Every object in Active Directory, including user objects, resides in one and
only one container/OU. Group Policies can be applied to OU's. Otherwise, it
doesn't matter where the user object resides, except to make it easier for
admins to find the object.

A user can be a member of any number of groups. Groups are used to grant
permissions and access to resources. It sounds to me like you want to place
your "External Users and Groups" in a group. Groups can also be members of
groups.

--
Richard Mueller
Microsoft MVP Scripting and ADSI
Hilltop Lab - http://www.rlmueller.net
--

"Myweb" <meiweb@xxxxxx> wrote in message
news:ff16fb66401988c992ce9747f408@xxxxxxxxxxxxxxxxxxxxxxx
Hello camille.reeves@xxxxxxxxx,

No, you can't. Every user account you create, get's his own Security
Identifier which is unique in the domain.

Best regards

Myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.

My colleague and I are creating accounts for our "External Users &
Groups" OU in Active Directory. The issue is that there are 20+
users
in another OU called "FTP Customers" that we also want to put in the
External Users & Groups OU and we don't see anything in the AD menus
that looks like it would give us the capability to do so.
The "External Users & Groups" OU is for people who are important
associates of our company and/or board members so we would like to
add
(rather than move) the 20+ users from the "FTP" OU who fall into that
same category so that our AD reflects what users are External users
and what users are FTP customers since some of these users are both.
Another reason why we want to add them to the External group is so
that they keep the same logon credentials. At the moment in order to
"add" the user to the External group, we have to create a new login
which isn't really adding a user; it's creating a new one.
I'm getting the sense that it's not possible since OUs are containers
for user objects that makes AD look more organized but I haven't read
anything to the contrary or anything that would imply it's not
possible.

Can someone please tell me the right answer. It would be really
great
if any of you could point me in the direction of documentation that
talks about this too. I would appreciate it.




.



Relevant Pages

  • Re: Filtering via OU
    ... The only attribute of user objects that indicates the parent container/OU is ... and you cannot use wildcard filters on DN. ...
    (microsoft.public.scripting.vbscript)
  • RE: How to import addresses into a GAL or something like it?
    ... How to use Csvde to import contacts and user objects into Active Directory ... Ray Fong ... Microsoft SBS Product Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Contacts in Active Directory
    ... How to use Csvde to import contacts and user objects into Active Directory ... contacts here is to create distribution lists for Users. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Help adding computers to an OU using ldifde or csvde.
    ... Use Csvde to Import Contacts and User Objects into Active ... Step-by-Step Guide to Bulk Import and Export to Active Directory ...
    (microsoft.public.win2000.active_directory)
  • Re: Windows Server 2003 R2 -> where to add users in Active Directory
    ... I have been using ADAM for storing usernames and pwds for a 3rd party ... where in Active Directory to create new users? ... The user objects however can, and should, be located in OUs ...
    (microsoft.public.windows.server.active_directory)