• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 173
  • Last Modified:

migration issue on rights to ou

i have a 2003 ad domain at a client they have all there users in one ou, but dont want to give full rights to the ou. Could they not just create a sub ou for the users in the users ou and give full rights to that?
0
zenworksb
Asked:
zenworksb
1 Solution
 
oBdACommented:
That's certainly technically possible, yes.
0
 
zelron22Commented:
oBdA: I don't know how you answered that, I couldn't figure out the question!  ;)
0
 
MightySWCommented:
LOL, he is famous for that.  
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 
mvgeertruyenCommented:
you can delegate permissions on OU's by right-clicking and selecting delegate control. If that is what you are trying to do.
0
 
oBdACommented:
Well, I *did* have to read it several times...

zenworksb,
a possible problem with moving some users to a sub OU might come up with LDAP queries (scripts or third-party products) that are querying a certain OU for user authentication, and do not query sub-OUs.
Group policies will stay the same (if inheritance isn't blocked on the sub-OU, obviously).
0
 
MightySWCommented:
Well, we can mitigate all of that by begging the question, what are you setting permissions for?
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now