I totally concur, that is a power play by the Enterprise Admins, you can
delegate rights to the OU to allow others to move there users to there
own OU's and manage them accordingly. 

I have more than 15K in users and that is how its done here..

Z

Edward E. Ziots
Network Engineer
Lifespan Organization
Email: [email protected]
Phone: 401-639-3505
MCSE, MCP+I, ME, CCA, Security +, Network +
-----Original Message-----
From: Michael B. Smith [mailto:[email protected]] 
Sent: Wednesday, February 04, 2009 8:58 AM
To: Active Directory Admin Issues
Subject: RE: Auto Created Users

That's a crock.

Most MORG/LORGs use OU and delegate rights specifically for the reasons
you
mention. (And others.)

Regards,

Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP
My blog: http://TheEssentialExchange.com/blogs/michael
I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php


-----Original Message-----
From: Stephen Wimberly [mailto:[email protected]] 
Sent: Wednesday, February 04, 2009 7:37 AM
To: Active Directory Admin Issues
Subject: Auto Created Users

Our enterprise domain automatically creates users based on a feed from
our
HR PeopleSoft.  During that design it was decided that all user objects
should reside in a single flat OU and that only a few select domain
admins
would have any rights to that OU.

This means we cannot apply any Preferences to the user object.
(Policies
can operate in a LoopBack processing model.)

We have asked that our Enterprise Domain change this to allow user
objects
to reside in other OU locations, but they tell us that 'every large
scale
domain' is done this way and that to do otherwise would be 'unheard of.'
Is
this true?  Is there 'no way' to effectively move user objects to other
AD
locations to allow OU Admins the ability to apply user preferences?  Is
there another way to apply user preferences?

We have just over 15,000 user objects.



~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK
Test! ~
    ~  <http://www.sunbelt-software.com/product.cfm?id=400>  ~


~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK
Test! ~
    ~  <http://www.sunbelt-software.com/product.cfm?id=400>  ~

~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~
    ~  <http://www.sunbelt-software.com/product.cfm?id=400>  ~

Reply via email to