Designing OU/GPO structure

Discussion in 'Active Directory' started by Dan Kelly, Apr 26, 2006.

  1. Dan Kelly

    Dan Kelly Guest

    I'm investigating setting up the OU structure on our migration to Win2K3
    server and am having some problems sorting out what is possible, or even

    Simple version of our setup:

    1 Domain with 3 Sites.

    3 types of computer: Server, Workstation and Laptop.

    5 User Types: IT, Finance, Engineers, Reception, Admin.

    There's no real difference (at them moment) between sites in terms of

    All 5 User types can use either the Laptops or the Workstations. Laptops
    need to be more secure than Workstations so that they are safe if lost.
    Workstations access is controlled largely by the access to the office.

    Servers are restricted to IT Users.

    As I see it I want to have separate OUs for the Computers and Users, with
    differing, but overlapping GPOs for each. However this is where I get

    Any suggestions
    Dan Kelly, Apr 26, 2006
    1. Advertisements

  2. I think it will be better to design your GPOs first in order to set OUs.
    Start with settings that will affect all domain users or workstation and
    narrow it to specific machines or users this will be easier to design your
    OU,GPO structure.


    Serkan Varoglu
    Serkan Varoglu, Apr 26, 2006
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.