OU question ??-

M

Misaro

(Active Directory Domain)
Hi,
I created a OU called Accounting !!

Is possible to do the OU administratively independent
from others OU's

fOR EXAMPLE : Computers,Users, shares etc available only
on that structure (OU) Nobody else access this OU without
explicity access.

Thanks any help !!
 
W

Walter Schulz

I created a OU called Accounting !!

Is possible to do the OU administratively independent
from others OU's

fOR EXAMPLE : Computers,Users, shares etc available only
on that structure (OU) Nobody else access this OU without
explicity access.

No. Access to shares, computers is coupled to the SID not the UID.
Take a look into Explorer and open the security tab for a
directory/file. You will be able to add users and groups. Nothing
about OUs.
Take a look into the security settings (control -> administration).
You will find the priviledges (log on locally, ...) are linked to
users and groups. Nothing about OUs here, too.

And an admin will always be able to override any security restrictions
once established.

Ciao, Walter

PS: Novell NetWare is able to do what you want. If you want to do
something similiar in AD you have to create another domain.
 
J

Joe Richards [MVP]

Well sort of...

You can hide computers and users and shared folder objects within the OU and make it so only certain people can see/use
them. However if they know the computer name or can browse for it via the browse service then they can find the
computers and they can find the shares on the computers though they won't be able to connect to the share unless you
have set them up with permissions.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top