Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 331
  • Last Modified:

AD - OU for the computers?

Is it a good practive to stick the computers in an OU?
For example, we have an OU called Marketing and then in that OU is another OU called MarketingComps and it has the computers listed.
  • 2
3 Solutions
It is a good idea for at least two reasons:

1. If you are brosing in ADUC,  you can easily separate the computers and users.
2. If you are using Group Policies, you can apply a GPO to the computers OU and it is totally separate from the users.

Hope this helps.
Kini pradeepCommented:
not really you can move the computer accounts to a differenet OU.
you would want to do that if you want to apply policies on work stations / servers.
Since Group Policies are separated for Computer and User, there is no technical reason to separate them from the User accounts.  Only settings in a GPO that affect the Computer will apply to them.

It simply eye-candy.

Kini pradeepCommented:
consider a scenario in which you have a terminal server farm and want to apply policies on the servers, there is also some thing called loop back where in you can apply the computer settings on users and vice versa.well it would depend upon what you wanna achieve.

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now