We help IT Professionals succeed at work.

What is the reasoning for having the computers and users in seperate OU's

fessiambre
fessiambre asked
on
350 Views
Last Modified: 2010-04-18
Hi experts I have a new 2003 server and I am looking at the different domain structures for my school. I have currently created OU's for Faculty and in there I have two OU's one for office administration and one for teachers here is my structure
OU Faculty-
                 OU Office staff          
                                     OU Users
                                     OU computers
                         
                 OU Teachers
                                     OU user
                                     OU computers
OU Students
                   OU Computers
                   OU Grade 12
                   OU Grade 11
                    and so on
                   
Would this be the best way to organise my domain for GPO and management of students?
           
Comment
Watch Question

Commented:
So you can apply seperate GPO's/security to them.  Thats a good start what you have already.  My structure is very similar.
CERTIFIED EXPERT
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Commented:
Yeh certain people have certain rights, like for student you can disable the network browser so you guys can dig in to see who on who computer.  It's basicially to limited control, they don't want students to snoop around the network.  That's all

Author

Commented:
I understand that GPO and OU are for managing the network, I am familiar with GPO's. My question is more about what is the best directory structure and the best way to lay out the OU's so I can apply the GPO. Thanks maybe this is a little clearer of my needs thanks.
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Author

Commented:
what is the value of having the computer in the OU along with the users?
CERTIFIED EXPERT

Commented:
I typically don't  because there is a completely different set of policies that apply to computers.  So putting them in different OUs would be more of a tool for your own organization of AD.

Cole

Author

Commented:
One last question. why would I put the computers in each individual OU rather than put them in just the general computers folder in the default setup?

Commented:
So you have more control over where the GPO's get applied.  You can seperate them anyway you choose, and apply the GPOs with more granular control.  It also helps to organaize them so their easier to find =)

Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Author

Commented:
wooying are you saying to keep the computers in the computer lab in a different OU than the users?

Commented:
No what I am saying is that for users (students) keep them in a OU with the GPO that you would like to apply.  Then for the tech guys give them what they need access for (control panels, limited access to proxy on IE and etc).  Hope that clears it up.  Thanks

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.