Understood. Is there a practical limit to the number of filtered GPOs on an OU ?
Why do you feel it is bad to create OUs for GPO only?
Michael Parent MCSE MCT
Analyst I - Web Services
ITOS - Systems Enablement
Maritime Life Assurance Company
(902) 453-7300 x3456
| "Myrick, Todd (NIH/CIT)" <[EMAIL PROTECTED]>
Sent by: [EMAIL PROTECTED] 10/30/2003 05:53 PM
|
To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> cc: Subject: RE: [ActiveDir] OUs by server function? |
My rule is OU's should be created to facilitate delegation, and GPO application. In that order. Not reverse. Don't create OUs to link GPO's to only.
If you aren't going to delegate specific access to the GPO to other groups, then leave the machines in a single OU, and link a GOP to the OU using a security group to filter the servers you want to apply the GPO to.
Todd Myrick
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 30, 2003 10:34 AM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] OUs by server function?
I am currently erdesigning our OU structure and was wondering:
Has anyone done an OU structure that accounts for server function i.e. file and print, web, database?
Was it useful? What other computer structures have you use successfully?
Michael Parent MCSE MCT
Analyst I - Web Services
ITOS - Systems Enablement
Maritime Life Assurance Company
(902) 453-7300 x3456
