Re: Deleting default OU's and Containers


>-----Original Message-----
>"Stian Ovrevage" <micromus@xxxxxxxxxxxx> wrote in message
>news:1f3e01c55619$86f6cea0$a401280a@xxxxxxxxxx
>> Hi again!
>> I'm posting here because the active_directory group is
>> closed/unaccessible at the moment.
>>
>> I've created new OUs for my Users, Computers and Domain
>> Controllers OU/containers, and moved the objects
>> respectively. I cannot however manage to delete the old
>> Containers/OUs, and I expect the redundancy to create a
>> great amount of confusion and counter-intuity.
>>
>> Is there a way to delete the containers Domain\Users,
>> Domain\Computers and the OU Domain\Domain Controllers (
>> without ofcourse crippling the whole enviroment! )?
>
>You should not delete the default containers.
>You are also advised that moving the DCs out of the
default Domain
>Controllers container is considered a "bad idea".
>I can understand creating new OU for the various users
depending on your
>management hierarchy and also for computers and even
redirecting the
>behaviour of the create new computer or user to point to
another OU instead
>of he default containers - but what do you hope to gain
by moving the DCs ?
>
>--
>
>Regards,
>
>Mike
>--
>Mike Brannigan [Microsoft]
>

Thank you for the warning, maybe I'll re-think my
strategies a bit ;-)

My goal was to create a more localized enviroment using
non-english names.
The reason for moving my DC(s) was to create some kind of
tree structure that allowed me to assign a global GPO to
my servers ( including non DCs ), and fine-grained GPOs to
groups of different servers.
I guess I can also accomplish this by using groups as an
intermediate step, but I'm a fan of simplicity and was
hoping to avoid that.

Regards, Stian
.