+1 Heck, I have blue haired little old lady librarians that move, copy and create user accounts. They do just fine and have never cause any harm at all.
> -----Original Message----- > From: Ziots, Edward [mailto:[email protected]] > Sent: Wednesday, February 04, 2009 9:05 AM > To: Active Directory Admin Issues > Subject: RE: Auto Created Users > > I totally concur, that is a power play by the Enterprise Admins, you > can > delegate rights to the OU to allow others to move there users to there > own OU's and manage them accordingly. > > I have more than 15K in users and that is how its done here.. > > Z > > Edward E. Ziots > Network Engineer > Lifespan Organization > Email: [email protected] > Phone: 401-639-3505 > MCSE, MCP+I, ME, CCA, Security +, Network + > -----Original Message----- > From: Michael B. Smith [mailto:[email protected]] > Sent: Wednesday, February 04, 2009 8:58 AM > To: Active Directory Admin Issues > Subject: RE: Auto Created Users > > That's a crock. > > Most MORG/LORGs use OU and delegate rights specifically for the reasons > you > mention. (And others.) > > Regards, > > Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP > My blog: http://TheEssentialExchange.com/blogs/michael > I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php > > > -----Original Message----- > From: Stephen Wimberly [mailto:[email protected]] > Sent: Wednesday, February 04, 2009 7:37 AM > To: Active Directory Admin Issues > Subject: Auto Created Users > > Our enterprise domain automatically creates users based on a feed from > our > HR PeopleSoft. During that design it was decided that all user objects > should reside in a single flat OU and that only a few select domain > admins > would have any rights to that OU. > > This means we cannot apply any Preferences to the user object. > (Policies > can operate in a LoopBack processing model.) > > We have asked that our Enterprise Domain change this to allow user > objects > to reside in other OU locations, but they tell us that 'every large > scale > domain' is done this way and that to do otherwise would be 'unheard > of.' > Is > this true? Is there 'no way' to effectively move user objects to other > AD > locations to allow OU Admins the ability to apply user preferences? Is > there another way to apply user preferences? > > We have just over 15,000 user objects. > > > > ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK > Test! ~ > ~ <http://www.sunbelt-software.com/product.cfm?id=400> ~ > > > ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK > Test! ~ > ~ <http://www.sunbelt-software.com/product.cfm?id=400> ~ > > ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK > Test! ~ > ~ <http://www.sunbelt-software.com/product.cfm?id=400> ~ ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~ ~ <http://www.sunbelt-software.com/product.cfm?id=400> ~
