Michel, You asked how we would handle the situation. Rather than a solution that looks at things done after the fact, my question back to you would be this: You mention the techs have the ability to add computers to the Domain, but do not have the ability to move objects from one OU to another OU (I have the same setup). Do the techs have, and if not someone in your organization should have, the ability to pre-create the computer objects where they belong, say when the request comes in from the user or a supervisor to join a system? I mention this because you said the computer account is created in OU=COMPUTERS, the default container used when there is no pre-created object. Pre-creation would solve your problem as when the system is joined to the Domain it would be where it belonged and get all the appropriate GPO's. I understand your pain, I suffer from the same ailment your describing, a few techs that can't seem to follow even the simplest instruction set, but in the long run pre-creation actually saves time and energy.
David Aragon > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Bruyere, Michel > Sent: Wednesday, April 13, 2005 8:31 AM > To: [email protected] > Subject: [ActiveDir] joining station to the domain and GPO... > > Hi, > I have a little question as to how you guys would handle this > situation... > > I have 2 techs that are adding stations to the domain from > time to time. > When they join the stations to the domain, the computer > account is created in the COMPUTERS built-in UO. > I have many UOs that are used to deploy the GPOs depending on > the type of computers, let say desktop and laptops. > > The problem actually occurs because they "forget" to tell me > that they added a new laptop to the domain and this new added > machine ends up on the network w/o the proper GPOs applied. > > I actually check the UO manually but I would like to have any > automated way to check for new computer account added in the > UO. For control purposes, they don't have access to move the > computer account from an UO to another and it have to stay that way. > > Any ideas or 3rd party programs that can help are appreciated... > > > > > Thanks > > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
