I am going to give the same advice everyone else did but want to restate it because it is that important.
Keep the DC in the domain controllers OU. If you truly want that GPO applied to your DC you can link it to that OU. Do NOT automatically update your DC. Changes to DCs should be strictly controlled and your hand should be on the trigger each and every time. The bluescreening of a DC is not the same as the bluescreening of a member server or workstation in many companies. DCs tend to have far more computers and people dependent on them than any other system on your network. They need to stay up and need to remain in a very well known state at all times. joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of ILyas Sent: Tuesday, December 23, 2003 12:25 AM To: ActiveDir Subject: [ActiveDir] moving DC Hi I have created a new OU (name:sus clients) in my AD and moved all my computers there to setup a grp policy which gets the updates from the SUS server loaded in my DC. Everything goes well. But, one computer that has been left is my DC computer under ou "DomainController". Can I move this computer also to the other OU? Would that affect? On the other hand, I could apply the same policy to the ou in question, but, I wanted to maintain only one OU for this purpose. Also, once I move the DC to this OU, my DC would also be applied of all patches. Thanks Md ILyas ________________________________ Conares Metal Supply Ltd p.o.box 2854, dubai, uae tel +9714 8835 111 - Extn.212 fax +9714 8836 611 mob +97150 6550 894 _______________________________ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
