It sounds like they just don't want to mess with managing AD permissions for the admins on a per-OU basis so they're just telling them they can't have any OU structure.
-----Original Message----- From: Kennedy, Jim [mailto:[email protected]] Sent: Wednesday, February 04, 2009 9:42 AM To: Active Directory Admin Issues Subject: RE: Auto Created Users +1 Heck, I have blue haired little old lady librarians that move, copy and create user accounts. They do just fine and have never cause any harm at all. > -----Original Message----- > From: Ziots, Edward [mailto:[email protected]] > Sent: Wednesday, February 04, 2009 9:05 AM > To: Active Directory Admin Issues > Subject: RE: Auto Created Users > > I totally concur, that is a power play by the Enterprise Admins, you > can > delegate rights to the OU to allow others to move there users to there > own OU's and manage them accordingly. > > I have more than 15K in users and that is how its done here.. > > Z > > Edward E. Ziots > Network Engineer > Lifespan Organization > Email: [email protected] > Phone: 401-639-3505 > MCSE, MCP+I, ME, CCA, Security +, Network + > -----Original Message----- > From: Michael B. Smith [mailto:[email protected]] > Sent: Wednesday, February 04, 2009 8:58 AM > To: Active Directory Admin Issues > Subject: RE: Auto Created Users > > That's a crock. > > Most MORG/LORGs use OU and delegate rights specifically for the reasons > you > mention. (And others.) > > Regards, > > Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP > My blog: http://TheEssentialExchange.com/blogs/michael > I'll be at TEC'2009! http://www.tec2009.com/vegas/index.php > > > -----Original Message----- > From: Stephen Wimberly [mailto:[email protected]] > Sent: Wednesday, February 04, 2009 7:37 AM > To: Active Directory Admin Issues > Subject: Auto Created Users > > Our enterprise domain automatically creates users based on a feed from > our > HR PeopleSoft. During that design it was decided that all user objects > should reside in a single flat OU and that only a few select domain > admins > would have any rights to that OU. > > This means we cannot apply any Preferences to the user object. > (Policies > can operate in a LoopBack processing model.) > > We have asked that our Enterprise Domain change this to allow user > objects > to reside in other OU locations, but they tell us that 'every large > scale > domain' is done this way and that to do otherwise would be 'unheard > of.' > Is > this true? Is there 'no way' to effectively move user objects to other > AD > locations to allow OU Admins the ability to apply user preferences? Is > there another way to apply user preferences? > > We have just over 15,000 user objects. > > > > ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK > Test! ~ > ~ <http://www.sunbelt-software.com/product.cfm?id=400> ~ > > > ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK > Test! ~ > ~ <http://www.sunbelt-software.com/product.cfm?id=400> ~ > > ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK > Test! ~ > ~ <http://www.sunbelt-software.com/product.cfm?id=400> ~ ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~ ~ <http://www.sunbelt-software.com/product.cfm?id=400> ~ ************************************************************************************************** Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. ************************************************************************************************** ~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~ ~ <http://www.sunbelt-software.com/product.cfm?id=400> ~
