Solved

If you move an OU (and all sub OU's) will it loose any info (e.g., gpo's, etc)?

Posted on 2009-04-05
3
316 Views
Last Modified: 2012-05-06
I want to move an OU within Active Directory.  I will be moving the OU higher in the hierarchy.  Will that cause my OU (and sub OU's) to loose anything?
0
Comment
Question by:victor2008
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 18

Accepted Solution

by:
Americom earned 125 total points
ID: 24074345
Yes, it will lose the GPOs linked to the OU and sub OUs. It also could lose some of the permissions that were assigned through delegation or from direct assignment to the OUs. Also, if you have block inhertance of GPO from parent OU or domains level etc, you could lose that as well. When you move to other OU, you could inherited GPO and permisisions in the similar fasion where you intend to move it to.
0
 
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 125 total points
ID: 24074671
The GPOs linked directly to that OU should still be linked to the OU when you move it (just tested it).  Americom is right about the GPOs linked at the parent you will lose those
You can also use Group Policy modeling from GPMC to see what policies will apply to a user or computer that is moved before you move them.  In this case you are moving an OU so not as helpful but something to put out there for the future
More on that here:
http://technet.microsoft.com/en-us/library/cc780305.aspx
 
Thanks
Mike
 
0
 
LVL 18

Expert Comment

by:Americom
ID: 24077001
Good point Mike. The GPOs linked "directly" to the OU should still be linked to the OU as those are GPO links which should follow the OU that was linked to.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Time server on domain 3 64
GPO denied - but why ? 6 57
Active Directory permissions 5 45
active directory 3 25
In-place Upgrading Dirsync to Azure AD Connect
A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question