<div>
oBdA: I don't know how you answered that, I couldn't figure out the question! &nbsp;;)<br />

</div>


oBdA: I don't know how you answered that, I couldn't figure out the question!  ;)


<div>
LOL, he is famous for that. &nbsp;
</div>


<div>
you can delegate permissions on OU's by right-clicking and selecting delegate control. If that is what you are trying to do.
</div>


you can delegate permissions on OU's by right-clicking and selecting delegate control. If that is what you are trying to do.

<div>
Well, I *did* have to read it several times...<br />
<br />
zenworksb,<br />
a possible problem with moving some users to a sub OU might come up with LDAP queries (scripts or third-party products) that are querying a certain OU for user authentication, and do not query sub-OUs.<br />
Group policies will stay the same (if inheritance isn't blocked on the sub-OU, obviously).
</div>


Well, I *did* have to read it several times...

zenworksb,
a possible problem with moving some users to a sub OU might come up with LDAP queries (scripts or third-party products) that are querying a certain OU for user authentication, and do not query sub-OUs.
Group policies will stay the same (if inheritance isn't blocked on the sub-OU, obviously).

<div>
Well, we can mitigate all of that by begging the question, what are you setting permissions for?
</div>


Well, we can mitigate all of that by begging the question, what are you setting permissions for?

<div>
<div class="content wysiwyg-content">
i have a 2003 ad domain at a client they have all there users in one ou, but dont want to give full rights to the ou. Could they not just create a sub ou for the users in the users ou and give full rights to that?
</div>
</div>


i have a 2003 ad domain at a client they have all there users in one ou, but dont want to give full rights to the ou. Could they not just create a sub ou for the users in the users ou and give full rights to that?

migration issue on rights to ou

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).