RE: 2000 Server users and security groups and group policies!

From: Bamskel (Bamskel_at_discussions.microsoft.com)
Date: 03/10/05 

Date: Thu, 10 Mar 2005 11:55:07 -0800

Numpty,

Thanks for the info, organizing them the way you had in the Australia
example is a GREAT way of doing it! One question... If the users are
already created in..

DOMAIN.name
    USERS
       John

And not in seperate OU's, is it possible to MOVE a user from one place to
another OU? Without deleting and re-making that user...? I have Exchange on
this server also, and my users are very picky with keeping every email that
they have, and Exchange is a headache in and of itself as I am not expertly
familiar with it... I don't want to have to delete the user and exchange box
and re-create it...

If it is not possible to just MOVE a user, but is necessary to DELETE the
user and re-create them in a new OU, IS it possible to point that user to
their original Exchange profile??

Thanks for the help!
(btw - I made the original post I just put the wrong Display Name)

"Numpty" wrote:

> Group Policy in Windows 2000 and 2003 does not apply to security groups
> without a lot of fiddling around with Group Policy Permissions.
>
> Active Directory takes advantage of "Organisational Units" which act in a
> similar fashion to folders / containers. Put the users in the OUs and apply
> the group policy to the OU.
>
> The use of OU's allows you to "nest" a group of users under a specific area,
> that will inherit from it's parent.
>
> eg.
> John is a user in Sales located in Perth Australia.
>
> The OU structure that John may be a part of could be set up as follows:
>
> Contoso.msft
> Australia
> Perth
> Users
> Sales
>
> John can also be a member of security groups, now only really used for
> assigning permissions and delegating rights. Security groups can also be used
> as email distribution groups.
>
> A good explanation of OUs:
> http://www.samspublishing.com/articles/article.asp?p=98126&rl=1
>
> Active Directory and Group Policy:
> http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/Default.asp?url=/resources/documentation/windows/2000/server/reskit/en-us/distrib/dsec_pol_DYZR.asp
>
> You can apply group policy to security groups, but it is not really a best
> practice, and can be quite messy to set up unless you really know what you
> are doing.
>
> Small Business Server is actually very good and creating an efficient setup
> by default. Have a look at some of the wizards that are available to you from
> the Configure Your Service wizard.
>
> Hope this helps
>
> "Users n Security groups n Group Policies" wrote:
>
> > I have a Windows 2000 SBS set up as a domain controller. I have created new
> > security groups inside the domain, along with users. The users were added to
> > their specified security groups. (this was done in the year 2003) Just
> > recently I have created Group Policies, and have added the users to their
> > correct group policy, along with a general group policy that is at the bottom
> > of the list and is the first applied.
> >
> > It seems that SOME (including ALL newly created users) of the users are not
> > fully making the correct relationship connection to their security group...
> > They have all the rights/priveledges of their specified security group, but
> > they do not take on the policies that are set up for that security group, OR
> > the general group policy for "Authenticated Users" When I log into a
> > computer with a user that does not seem to fully make the correct
> > relationship connection, and run gpresult.exe the "Assigned Security Groups"
> > area is BLANK. Yet when looking in Active Directory under both the user's
> > "Member Of" tab and the corresponding "Security Group"'s "Members" tab, it
> > correctly appears in here.
> >
> > Any ideas or suggestions or questions for further clarification are GREATLY
> > appreciated!
> >
> > Thanks,
> >
> >

Relevant Pages

  • RE: 2000 Server users and security groups and group policies!
    ... Yes you can move users between Organisational Units. ... I have Exchange on ... >> without a lot of fiddling around with Group Policy Permissions. ... Security groups can also be used ...
    (microsoft.public.windows.server.general)
  • RE: 2000 Server users and security groups and group policies!
    ... Group Policy in Windows 2000 and 2003 does not apply to security groups ... without a lot of fiddling around with Group Policy Permissions. ... Active Directory and Group Policy: ...
    (microsoft.public.windows.server.general)
  • Re: Clients wont find their security groups etc.
    ... My initial thoughts were it was a GP problem, and that was the reason why the settings i had set, were not applying to some clients. ... it seems to be a problem with the User not seeing the additional of new Security Groups in the domain they are in. ... Putting users into security groups has nothing to do with Group Policy in the first place. ... You need to link the GPO to the OU where users and/or computer objects reside in. ...
    (microsoft.public.windows.group_policy)
  • Re: Connection to MS Exchange Unavailable
    ... my problem also expands to the lack of Group Policy extending to ... I know that the SBS server can't configure Outlook ... "Connection to Microsoft Exchange server is Unavailable. ... Click Services tab and select Hide All Microsoft Services and Disable ...
    (microsoft.public.windows.server.sbs)
  • Re: Difference between MYbusiness users and Users
    ... permit the assignment of group policy as you stated. ... that "containers" are a bit of old school / legacy Active Directory days, ... I need to set up security groups and I am confused. ...
    (microsoft.public.windows.server.sbs)
Loading