asked on

Dangerous to move user objects around in MS Active Directory (Server 2008)?

Initially when I setup the Active Directory on Windows 2008 server, I created all the accounts, groups and printers in Users. Now I found that I could create Organizational Unit in the root domain so I created a company OU then all the departments and started moving a few user accounts into the Department OU.

I am doing this so that all the users are properly categorized instead of just one long list in the original User OU.

Is there any issues/risk/danger of moving user account around (using right click and Move)? I do not use any policy on OU containers etc (mention this because there was a warning that policies may not work if objects moved to another OU).

Thanks
Joo

ASKER CERTIFIED SOLUTION

Phil_taylor1980

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

artradis

ASKER

Thanks. Yes, it is definitely better to put users in OUs. But because I created them all in the default User OU, I was concerned about moving things around and breaking links.

It seems after moving users around, the links update themselves i.e. if a user account is in two groups, after moving the user account object into another OU, the links in the groups will automatically update.

I just wanted to check to avoid the case were users suddenly look access rights to folders when they login tomorrow and then there will be a hugh impact.

Thanks
Joo

SOLUTION

Brian Pierce

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial