Link to home
Start Free TrialLog in
Avatar of PAULADAMSJR
PAULADAMSJRFlag for United States of America

asked on

Domain users missing when looking at dsa.msc

Ok, When I run Active Directory and Users msc, (dsa.msc) I do not see domain users in the list. For example, if you copy and paste this url:

http://www.windowsecurity.com/img/upl/image0041094820662203.jpg

and look real close, you can see Default domain policy, domain controllers and then domain users...

Wouldn't that be where I setup my group policies ? Like if I wanted to add a login script, would I not setup that within that area...? Anyway, Domain users is missing when I view my dsa.msc. Can anyone assist in telling me why that may be ?

Thanks !!!!!   :-)
ASKER CERTIFIED SOLUTION
Avatar of deadite
deadite
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of PAULADAMSJR

ASKER

So, next question....Since login's appear to be OU specific, should I be creating department OU's ? For example...When I open my active directory Users & Computers, and I look under users, that's where all my users are. Now, should I create a new OU for Human Resources and then move all my HR users into that ? ....and then setup the policies under the Human Resources OU for login scripts etc ??

Please let me know...I really need your assistance. !!  Thanks !!   PA -
In reference to my prior comment, I ment to say group policies appear to be OU specific...
Avatar of PaulRKrueger
PaulRKrueger

That's completely up to you. It all depends on how you want to apply group policy (i.e. by department, by location, by application, etc.). By department is a good start, though.
It does depend on what  you want to do.  If you need different drives mapped for the Accounting and Sales departments, then making OU's for each department might be easiest.  Otherwise, if you have a more geographic setup where users in building 1 need the same mapped drives, which is different from users in bulding 2, you can use OU's by geography.  Just sit down, think of what the user's needs are and group by that (usually the best way to figure it out).
Another important tip,

I would recommend DO NOT CHANGE THE DEFAULT DOMAIN POLICY!  This will apply to your workstations, Domain Controllers, etc....  If you set the wrong setting, you might end up in a nightmare.  Typically, the only thing used on the default domain policy is for account lockout after X number of failed login attempts... items like that.