Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

WIN 2008 32BIT - ADUC - BUILT-IN & USER QUERY

Posted on 2011-09-08
9
Medium Priority
?
343 Views
Last Modified: 2012-08-13
Hi I normally create user accounts in the ADUC - User folder, but wanted to know when I should create in the Built-in folder?
0
Comment
Question by:mikey250
  • 7
  • 2
9 Comments
 
LVL 9

Accepted Solution

by:
Chev_PCN earned 2000 total points
ID: 36501880
Pretty much never!
As the name implies - this folder is specifically for the pre-created "built-in" accounts.
One big risk of putting normal users into this OU would be that you cannot control them via GPO.  You should never apply any custom GPOs to that OU - it could have negative consequences across the whole domain.
0
 

Author Comment

by:mikey250
ID: 36502231
Hi Chev_PCN, I havent mentioned an 'OU' as not added one yet, but will do later!

Just to break down your comments, so I fully understand:

So if I was to create computer accounts on the server rather than joining them from the host pc, this is what is classed as 'Prestaging' presumably so I could then if I wanted to add them in the initally 'Built-in folder', - is that what you mean specifically?

You say 'one big risk of putting normal users into an OU would be that they could not be controlled via a GPO or at least presumably I would have problems so I should not bother as could have negative consequences across the whole domain?

So I should stick to ignoring the 'Built-in' folder, unless I know exactly what Im doing!!!!!!

Ok!!
0
 
LVL 9

Assisted Solution

by:Chev_PCN
Chev_PCN earned 2000 total points
ID: 36502267
Hi Mikey.
I would advise not using the built-in container at all. (BTW, it's not an OU, my terminology error).
If you are prestaging, use the default computers container, and then move the computer account objects to the correct OU afterwards.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 

Author Comment

by:mikey250
ID: 36502530
Thats what I mean!  I will ignore altogether!

Just as a last comment can you give me an example of 'pre-created accounts' ?
0
 

Author Comment

by:mikey250
ID: 36556626
Hi anyone before I close this thread can anyone simply a little more why I should not use the 'Built-in' account as what is the point of having it at all, unless it only gets used in paricular type companies like DOD or something so not sure!!?
0
 

Author Comment

by:mikey250
ID: 37326820
Hi Chev PCN,

Qns1. Before I close this question I wish to clarify something due to your first comments made:

"As the name implies - this folder is specifically for the pre-created "built-in" accounts."

You said that pretty much never I should use the 'built-in folder container and if this does not relate to 'pre-staging', can you give me an example of 'pre-created' as mentioned above, just so I know 'who' uses this ?

Thanks for the advice so far anyway, just wanted to clear that last part up!!
0
 

Author Comment

by:mikey250
ID: 37333843
As the name implies - this folder is specifically for the pre-created "built-in" accounts.


hi after reading through all expert comments aswell as my own ive decided to allocate points and close this thread.  Advice appreciateda
0
 

Author Comment

by:mikey250
ID: 37333846
oops add last comments without adding mine!

'As the name implies - this folder is specifically for the pre-created "built-in" accounts' - Although the word 'pre-created' sounds to me a lot like 'pre-staged', im assuming not, otherwise i can take on board what was advised and just avoid completely.

i will close this thread as the advice is sound!  appreciated.
0
 

Author Closing Comment

by:mikey250
ID: 37333848
sound advice.
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

885 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question