• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 207
  • Last Modified:

OU not working quite right

I have created an OU in AD but it is not showing up (or resolving contents) when attempting to use it.

Let's say the OU name is "HostedUsers".  I create a couple of security groups within that OU.  I then create another OU as a child of "HostedUsers" - let's call it "BobsUsers".  Within BobsUsers I create a few security groups.  My goal is to make a security group within BobsUsers a member of a security group in HostedUsers.  I enter the name of the security group in the Members Of "add" screen and it doesn't resolve.  Doing an advanced find from that location shows no contents (none of BobsUsers' or HostedUsers groups appear).

As a test I just created the same thing on another AD domain and everything worked fine.

There are no related errors in the event log that point me in the right direction.

Does anyone have any suggestions?
0
NotClever
Asked:
NotClever
  • 3
  • 2
1 Solution
 
LauraEHunterMVPCommented:
The OU location of a security group within a single domain has no bearing on group nesting.

What is the functional level of your domain/forest?

What is the scope of the groups that you are attempting to nest, as not all group scopes can be nested within all other group scopes, dependent on the DFL/FFL of your domain and forest.
0
 
NotCleverAuthor Commented:
Thanks for the quick response!

The domain/forest is at Windows Server 2003 Native functional level.
The groups being created are Global scope.
0
 
NotCleverAuthor Commented:
Argh!  Correction, the functional level is Windows 2000 mixed for the domain, and Windows 2000 for the forest.

I was thinking of another AD domain.
There is no reason it cannot be at Windows Server 2003 level, do you think I should upgrade it?
Thanks again! - Eric.
0
 
LauraEHunterMVPCommented:
If all of your DCs are running Windows Server 2003, you can upgrade the DFL/FFL to 2003.  At 2000 mixed mode, you cannot nest one global group inside of another.
0
 
NotCleverAuthor Commented:
Thanks again for your super-fast response.  I've added your blog to my RSS feed.  Love the URL for it :)  If you're ever in the Tampa area at a user group, I'll be sure to swing by! - Eric.
0

Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now