moving objects in active directory

Posted on 2006-05-13
Medium Priority
Last Modified: 2010-04-18
what are the ramifications of moving objects in active directory?  i have a situation where i want to organize a domain's active directory.  no OUs have been added.  all users are in the default users OU.  permissions have been applied at the user level.  

i know i will need to redo all of the folder shares, but at least i will be able to apply permissions and policy's per OU and not individual user.  i am concerned about their distribution groups.  they have made a boat load and i wanted to be able to gather them together to try to make them manageable.  

Question by:joewy1
  • 2
LVL 23

Accepted Solution

rhandels earned 1000 total points
ID: 16674062

Normally there isn't a problem if you move created users (try not to move the build in users and groups, this could cause some serious issues). Only thing you have to take into account is policies. If you allready created domain or site policies, then there are no worries, because they will still be applicable if you move the users. Do make sure to get your policies right, else it will be like opening pandora's box..

Policies is alos the main reason for createing OU's (and off course kepping it managable) there isnt really any other real reason to be doing this....

Try using the GPMC (Group Policy Management Console) to do your policy management, makes your live much mor easy....
LVL 48

Assisted Solution

Jay_Jay70 earned 1000 total points
ID: 16675926
Hi joewy1,

dont stress with your dissy groups either, o any groups for that matter, AD will recognise an abject by its ID not its place within AD, you can move a user arround as much as you like and AD will trace it and look after itself,

as rhandels mentioned, policies are your big one

Author Comment

ID: 16677785
cool deal..  the only policies in place are the defaults.  thanks for the assistance.
LVL 23

Expert Comment

ID: 16680221
Ur welcome...


Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
Learn about cloud computing and its benefits for small business owners.
Is your data getting by on basic protection measures? In today’s climate of debilitating malware and ransomware—like WannaCry—that may not be enough. You need to establish more than basics, like a recovery plan that protects both data and endpoints.…
As many of you are aware about Scanpst.exe utility which is owned by Microsoft itself to repair inaccessible or damaged PST files, but the question is do you really think Scanpst.exe is capable to repair all sorts of PST related corruption issues?

807 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question