How are your OU's configured?

 

Guy recommends:
Free Solarwinds
VM Console

 A free desktop tool that monitors, or restarts, your VMware virtual machines.  Download your free VM Console

---

 

Do your OUs reflect your company structure?

Best Practice (Litmus Test)

Professionals: Plan to create lots of Organizational Units

Amateurs: Create all new objects in the Users folder

Organisational Units

Windows Server 2003 (and W2K) feature Organization units, the benefit of OUs is that they allows you to classify users by department or site.  There are two advantages of this arrangement, you can delegate within units, and you can create different Group Policies for each OU.

If you do not create OUs, all your users will be born in the default container, and so you lose a valuable chance to categorize people by department or site. 

Planning Organization Units is a major job.  Firstly do create a top level based on geographic location, or company department?  Also bear in mind that OUs are the main vehicle for Group Policy, my point is that you may want different Group Policies for different users.  So take care designing your OU structure.

Delegation

Delegation is item that has been high on administrator's wish list for many years.  The problem in NT 4.0 is that if you wanted help desk staff to be able to change user's passwords, then you had to make them members of the Account operator's group. There was no half way house they either had full rights over the users or none at all.

With Windows server 2003 you can achieve fine control through delegation.  For example, help desk staff can reset passwords of the sales OU.  Human resources can be delegated to create new users in the manufacturing OU.  Neither group would be allowed to view the audit logs or reset the administrator's password.

To configure, got to \ Active Directory Users and Computer \ <domain> \ organisational unit \ Right Click  Delegate Control.

Guy Recommends:  Solarwinds' Free Bulk Import Tool

Import users from a spreadsheet.  Just provide a list of the users with their fields in the top row, and save as .csv file.  Then launch this FREE utility and match your fields with AD's attributes, click and import the users.  Optionally, you can provide the name of the OU where the new accounts will be born.

There are also two bonus tools in the free download, and all 3 have been approved by Microsoft:

1. Bulk-import new users into Active Directory.
2. Seek and zap unwanted user accounts.
3. Find inactive computers.

Download your FREE bulk import tool.

See more about Windows 8

• Install Windows 8  • When will Windows 8 Expire?  • Windows 8 Metro UI

• Windows 8 Task Manager

 *

Custom Search	Guy Recommends: SolarWinds Free IP SLA Monitor SolarWinds IP SLA Monitor offers so much more than just uncovering network bottlenecks, the real joy is learning about router traffic. To find out what's happening on the network between your computers and their routers, download your free copy of the of IP SLA Monitor.
Home Copyright © 1999-2012 Computer Performance LTD All rights reserved Please report a broken link, or an error.