Thanks for all the replies, at least I'm not out in left field on this one!

Exactly how the importation is done is beyond my level of knowledge,
although the timing for the question is based upon a change in the process.
They are moving from one technology to another, so I'm hoping that this will
involve greater options.  Although so far our Enterprise Domain Admin is
sticking to the single OU structure, I just can't figure out why.

I manage a small single domain AD forest of only about 700 users and about
500 computers.  When I create a user I just right click in ADUC!  I _really_
don't want to get away from the user preferences and I'm looking for a self
check to ensure I'm not being unreasonable.  I'll keep pushing.



-----Original Message-----
From: Peter Johnson [mailto:[email protected]] 
Sent: Wednesday, February 04, 2009 8:56 AM
To: Active Directory Admin Issues
Subject: RE: Auto Created Users

At my previous company we did this with no issues. Are u pulling it into AD
through MIIS?


-----Original Message-----
From: Campbell, Rob [mailto:[email protected]]
Sent: 04 February 2009 15:46
To: Active Directory Admin Issues
Subject: RE: Auto Created Users

We have asked that our Enterprise Domain change this to allow user objects
to reside in other OU locations, but they tell us that 'every large scale
domain' is done this way and that to do otherwise would be 'unheard of.'
Is
this true?

Absolutely not.

-----Original Message-----
From: Stephen Wimberly [mailto:[email protected]]
Sent: Wednesday, February 04, 2009 6:37 AM
To: Active Directory Admin Issues
Subject: Auto Created Users

Our enterprise domain automatically creates users based on a feed from our
HR PeopleSoft.  During that design it was decided that all user objects
should reside in a single flat OU and that only a few select domain admins
would have any rights to that OU.


This means we cannot apply any Preferences to the user object.
(Policies
can operate in a LoopBack processing model.)

We have asked that our Enterprise Domain change this to allow user objects
to reside in other OU locations, but they tell us that 'every large scale
domain' is done this way and that to do otherwise would be 'unheard of.'
Is
this true?  Is there 'no way' to effectively move user objects to other AD
locations to allow OU Admins the ability to apply user preferences?  Is
there another way to apply user preferences?

We have just over 15,000 user objects.



~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~
    ~  <http://www.sunbelt-software.com/product.cfm?id=400>  ~

************************************************************************
**************************
Note: 
The information contained in this message may be privileged and confidential
and protected from disclosure.  If the reader of this message is not the
intended recipient, or an employee or agent responsible for delivering this
message to the intended recipient, you are hereby notified that any
dissemination,

distribution or copying of this communication is strictly prohibited. If you
have received this communication in error, please notify us immediately by
replying to the message and deleting it from your computer. 
************************************************************************
**************************



~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~
    ~  <http://www.sunbelt-software.com/product.cfm?id=400>  ~




~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~
    ~  <http://www.sunbelt-software.com/product.cfm?id=400>  ~


~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~
    ~  <http://www.sunbelt-software.com/product.cfm?id=400>  ~

Reply via email to