Title: Message
I'd
suggest doing whatever makes sense to you, really. We have4
basic OU's - Employees, Workstations, Servers and Groups.
Part
of my rationale for having a separate OU for Groups is that I also maintain a
separate recipients container in Exchange 5.5 for Distribution Lists
Title: Message
What are the reasons for delegating the AD
Root Identifier? Why delegate read?
From: Myrick, Todd
(NIH/CIT) [mailto:[EMAIL PROTECTED]
Sent: Friday, August 08, 2003 6:25 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] Groups
and OU's
Per delegation I do
. If I don't create an OU for the groups will I have to include
groups into another ou? I will have one person administer groups.
-Original Message-
From: Jimmy Andersson [mailto:[EMAIL PROTECTED]
Sent: Friday, August 08, 2003 4:11 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Groups
Yes, you could have an OU for groups if you want. But the pros and cons all
depend on the way you want to administrate your AD. Can you give a bit more
info on your environment?
Regards,
/Jimmy
-
Jimmy Andersson, Q Advice AB
CEO Principal
Title: Message
Per
delegation I do the following
AD
---Root Identifier
+Delegation Description =Del-ID (5 Char
Max)Give FC to the Directory Administrators, Enterprise Admins,
andSystem; Read to the Data Administrators Authenticated
Users.
+OU or CN = Users Description =
]
Sent: Friday, August 08, 2003 4:11 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Groups and OU's
Yes, you could have an OU for groups if you want. But the pros and cons all
depend on the way you want to administrate your AD. Can you give a bit more
info on your environment?
Regards,
/Jimmy
