Groups and OU's

[Guest]

In my organization we are running a Win2k AD domain and are going through a restructuring of our Active Directory. My particular site, which use to have it's own domain, has now been delegated an OU. There are many new groups that need to be created. I read that Microsoft reccommends that each new group that is created needs to be placed in it's own OU. As it stands right now if I follow this strategy there is going to be a large amount of OU's. Just to make sure I'm following this strategy correctly I'll give you an example; Human Resoures group nested in HR OU, Exchange group nested in an Exchange OU, Administrators group housed in an admin OU, and so on. All these new groups and OU's would be nested under the OU that was delegated to my site. Plus we have a large number of off sites that will need there own OU's. Could someone please give me some help on this. Is this strategy correct? Any help will be greatly appreciated.Thanks in advance.

 

[Simon Geary]

That is not what Microsoft recommends, you have understood wrong. You do not
need to create a separate OU for each group you create. Unless these
different groups will have different Group Policies or different
administrators having control over them you can keep all your groups in the
same OU.

In my organization we are running a Win2k AD domain and are going through

a restructuring of our Active Directory. My particular site, which use to
have it's own domain, has now been delegated an OU. There are many new
groups that need to be created. I read that Microsoft reccommends that each
new group that is created needs to be placed in it's own OU. As it stands
right now if I follow this strategy there is going to be a large amount of
OU's. Just to make sure I'm following this strategy correctly I'll give you
an example; Human Resoures group nested in HR OU, Exchange group nested in
an Exchange OU, Administrators group housed in an admin OU, and so on. All
these new groups and OU's would be nested under the OU that was delegated to
my site. Plus we have a large number of off sites that will need there own
OU's. Could someone please give me some help on this. Is this strategy
correct? Any help will be greatly appreciated.Thanks in advance.

 

[Guest]

I suspected that I had misinterpreted what I had read in Microsoft's knowledge base article Q320054. Simon, could you please clarify what is meant exactly in this article.

 

[Simon Geary]

I guess you have been confused by this line: "Microsoft recommends that you
locate new groups in an organizational unit folder"

This does not mean that you should create an OU for each group, it means
that you should move any newly created groups out of the default container
into an OU (any OU, the one of your choice)

As your OU has been delegated to you you will most likely not be creating
groups in the default container anyway as you probably wont have the rights.
You should be creating groups by right-clicking the OU and selecting New >
Group.

I suspected that I had misinterpreted what I had read in Microsoft's

knowledge base article Q320054. Simon, could you please clarify what is
meant exactly in this article.