RE: [ActiveDir] GPO on XP & 2000 Pro

[Robert Bobel]

Title: RE: [ActiveDir] GPO on XP & 2000 Pro

Most of what I’ve seen is that they first organize by Geo then by organizationally (or the other way round) then further divide the objects by roles like Mobile users, Desktops, service accounts, de-provisioned users etc.   I can’t image organizing by attribute data like OS. I would think that a system upgrade could potentially cause GPOs to break and you’d constantly be filtering ADUC on OS to figure out if you need to move stuff. I suppose scripting it could help…   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of RM Sent: Thursday, August 25, 2005 12:03 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] GPO on XP & 2000 Pro   On Wed, 24 Aug 2005 20:45:07 -0400, [1]"Robert Bobel" <[EMAIL PROTECTED]> said: > I'm pretty much with Darren on this one. Keeping it organizad over the > long term may end up being a lot of trouble especially if the environment of a fairly large size. It's easy when not every Tom, Dick, and Harry can create computer accounts.  If your org is really that large, you likely already have OU's that either follow geographic lines or hierarchical lines.  Sub OU's would contain servers or workstations. I cringe at the thought of a Fortune 500 with 30,000 computer accounts in one OU.  Do companies really run that way? RM