RE: [ActiveDir] OU Delegation

[Chianese, David]

Brian,   Could you send a copy off list to me as well.  [EMAIL PROTECTED]  I take it is a _vbscript_.     Thanks,   Dave From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harding, Devon Sent: Thursday, January 12, 2006 11:30 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OU Delegation Yes, I would definitely like to see that script.    From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Desmond Sent: Wednesday, January 11, 2006 4:49 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] OU Delegation   Devon-   To a certain extent is varies based on your business requirements. There are basic things though:   Computers Users Groups Contacts.   My standard for OUs is something like this   CookieCutter Division --Computes ----Workstations ----Laptops ----Servers --Users ----Employees ----Contractors ----Temporary --Groups --Contacts   I let people create OUs under the bottom most OU in each subtree and do whatever to the relevant objects. I provision users centrally so I don't delegate exchange. It's way easier to have some sort of central exchange provisioningysstem or site rather than trying to delegate it.   I have a sript I wrote that creates the OU structure, groups, and delegates various rights, you're welcome to a copy if you want it. You'll have to modify it for your organization, but, it's a good start.   Thanks, Brian Desmond [EMAIL PROTECTED]   c - 312.731.3132   From: [EMAIL PROTECTED] on behalf of Harding, Devon Sent: Wed 1/11/2006 4:24 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OU Delegation We’re in the process of consolidating 21 child domains into just one and one root.  We want to separate the divisions (domains) into different OUs.  Is there a guide or best practice out there on delegating admin permissions on OUs?  Also, we’ve got Exchange permissions to deal with too.   Devon Harding Windows Systems Engineer Southern Wine & Spirits - BSG 954-602-2469   __________________________________ This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use or distribution of the information included in the message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank You. *********** Internet Email Confidentiality ************ The information contained in this message (including any attachments) may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that it is strictly prohibited (a) to disseminate, distribute or copy this communication or any of the information contained in it, or (b) to take any action based on the information in it. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. **********************************************************