Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

WIN 2008 32BIT - ADUC - BUILT-IN & USER QUERY

Posted on 2011-09-08
9
333 Views
Last Modified: 2012-08-13
Hi I normally create user accounts in the ADUC - User folder, but wanted to know when I should create in the Built-in folder?
0
Comment
Question by:mikey250
  • 7
  • 2
9 Comments
 
LVL 9

Accepted Solution

by:
Chev_PCN earned 500 total points
ID: 36501880
Pretty much never!
As the name implies - this folder is specifically for the pre-created "built-in" accounts.
One big risk of putting normal users into this OU would be that you cannot control them via GPO.  You should never apply any custom GPOs to that OU - it could have negative consequences across the whole domain.
0
 

Author Comment

by:mikey250
ID: 36502231
Hi Chev_PCN, I havent mentioned an 'OU' as not added one yet, but will do later!

Just to break down your comments, so I fully understand:

So if I was to create computer accounts on the server rather than joining them from the host pc, this is what is classed as 'Prestaging' presumably so I could then if I wanted to add them in the initally 'Built-in folder', - is that what you mean specifically?

You say 'one big risk of putting normal users into an OU would be that they could not be controlled via a GPO or at least presumably I would have problems so I should not bother as could have negative consequences across the whole domain?

So I should stick to ignoring the 'Built-in' folder, unless I know exactly what Im doing!!!!!!

Ok!!
0
 
LVL 9

Assisted Solution

by:Chev_PCN
Chev_PCN earned 500 total points
ID: 36502267
Hi Mikey.
I would advise not using the built-in container at all. (BTW, it's not an OU, my terminology error).
If you are prestaging, use the default computers container, and then move the computer account objects to the correct OU afterwards.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:mikey250
ID: 36502530
Thats what I mean!  I will ignore altogether!

Just as a last comment can you give me an example of 'pre-created accounts' ?
0
 

Author Comment

by:mikey250
ID: 36556626
Hi anyone before I close this thread can anyone simply a little more why I should not use the 'Built-in' account as what is the point of having it at all, unless it only gets used in paricular type companies like DOD or something so not sure!!?
0
 

Author Comment

by:mikey250
ID: 37326820
Hi Chev PCN,

Qns1. Before I close this question I wish to clarify something due to your first comments made:

"As the name implies - this folder is specifically for the pre-created "built-in" accounts."

You said that pretty much never I should use the 'built-in folder container and if this does not relate to 'pre-staging', can you give me an example of 'pre-created' as mentioned above, just so I know 'who' uses this ?

Thanks for the advice so far anyway, just wanted to clear that last part up!!
0
 

Author Comment

by:mikey250
ID: 37333843
As the name implies - this folder is specifically for the pre-created "built-in" accounts.


hi after reading through all expert comments aswell as my own ive decided to allocate points and close this thread.  Advice appreciateda
0
 

Author Comment

by:mikey250
ID: 37333846
oops add last comments without adding mine!

'As the name implies - this folder is specifically for the pre-created "built-in" accounts' - Although the word 'pre-created' sounds to me a lot like 'pre-staged', im assuming not, otherwise i can take on board what was advised and just avoid completely.

i will close this thread as the advice is sound!  appreciated.
0
 

Author Closing Comment

by:mikey250
ID: 37333848
sound advice.
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
A safe way to clean winsxs folder from your windows server 2008 R2 editions
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question