Container Question!!!

[Steve Gould]

We have Win2k3 AD. It has always been a default setup. I am thinking of
creating OU's to handle Onsite versus offsite users and the different OS's
such as XP, 2Kp, and Win9x. I want to do this so I can apply different group
policy based on if it is an onsite workstation, off site notebook and based
on operating systems.

Does this make sense?

There is a User container and a Computer container within our domain. Inside
of an OU can I create similar containers? Currently I don't see how to do
this other than use another OU.

I would appreciate advice on this.

Thanks.

Steve

 

[Herb Martin]

We have Win2k3 AD. It has always been a default setup. I am thinking of
creating OU's to handle Onsite versus offsite users and the different OS's
such as XP, 2Kp, and Win9x.

OUs are mostly irrelevant for anything before Win2000
with the exception of just convenience of viewing the machines.

I want to do this so I can apply different group
policy based on if it is an onsite workstation, off site notebook and based
on operating systems.

There are two PRIMARY reasons for creating OUs:

1) Delegate administration

2) Link Group Policy (only relevant for users and Win2000+ machines)

Does this make sense?

The general idea of using GPOs does.

[Also note that in Win2003, only, you can distinguish computer
OS types by WMI filters.]

There is a User container and a Computer container within our domain. Inside
of an OU can I create similar containers? Currently I don't see how to do
this other than use another OU.

Similar but different. Those (default) containers are NOT
OUs and cannot be used for delegation or linking group policy.

They might be a good place to just leave your Win9x or NT
legacy computer accounts.

 

[ptwilliams]

When you say off-site, do you mean different IP range?

If so, you should link policy to the sites.


--

Paul Williams

http://www.msresource.net/
http://forums.msresource.net/