Why No OUs Under User Group?

Discussion in 'Active Directory' started by Will, Jun 22, 2005.

  1. Will

    Will Guest

    Why does Microsoft forbid creating OUs under the Users group? They would
    be useful for putting related entities, like test accounts for a specific
    Will, Jun 22, 2005
    1. Advertisements

  2. Hello Will,

    Users is not a group, it's a container. The main difference between an
    OU and a container is that you can't assign GPOs to a container. It is
    recommended to move the users (and groups, computers) into OU's you
    create yourself (e.g. "Company User") but keep the default users and
    groups in there (like domain admins, and the exchange accounts,...).
    Main advantage is that you create your OU-Strukture based on
    Administrative Delegation and secondary on GPOs to be applied.

    Note that with Windows Server 2003 you are even able to define any OU as
    the new default container for new users or computers which were created
    without specifying their location within AD, look at the rediruser and
    redircmp commands for those tasks.

    Gruesse - Sincerely,

    Ulf B. Simon-Weidner

    MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz
    Weblog: http://msmvps.org/UlfBSimonWeidner
    Website: http://www.windowsserverfaq.org
    Ulf B. Simon-Weidner [MVP], Jun 22, 2005
    1. Advertisements

  3. Will

    Will Guest

    I was able to use this to organize our users list, thanks.

    Internet: westes AT earthbroadcast.com

    message > Users is not a group, it's a container. The main difference
    between an
    Will, Jun 22, 2005
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.