Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 351
  • Last Modified:

WIN 2008 32BIT - ADUC - BUILT-IN & USER QUERY

Hi I normally create user accounts in the ADUC - User folder, but wanted to know when I should create in the Built-in folder?
0
mikey250
Asked:
mikey250
  • 7
  • 2
2 Solutions
 
Chev_PCNCommented:
Pretty much never!
As the name implies - this folder is specifically for the pre-created "built-in" accounts.
One big risk of putting normal users into this OU would be that you cannot control them via GPO.  You should never apply any custom GPOs to that OU - it could have negative consequences across the whole domain.
0
 
mikey250Author Commented:
Hi Chev_PCN, I havent mentioned an 'OU' as not added one yet, but will do later!

Just to break down your comments, so I fully understand:

So if I was to create computer accounts on the server rather than joining them from the host pc, this is what is classed as 'Prestaging' presumably so I could then if I wanted to add them in the initally 'Built-in folder', - is that what you mean specifically?

You say 'one big risk of putting normal users into an OU would be that they could not be controlled via a GPO or at least presumably I would have problems so I should not bother as could have negative consequences across the whole domain?

So I should stick to ignoring the 'Built-in' folder, unless I know exactly what Im doing!!!!!!

Ok!!
0
 
Chev_PCNCommented:
Hi Mikey.
I would advise not using the built-in container at all. (BTW, it's not an OU, my terminology error).
If you are prestaging, use the default computers container, and then move the computer account objects to the correct OU afterwards.
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
mikey250Author Commented:
Thats what I mean!  I will ignore altogether!

Just as a last comment can you give me an example of 'pre-created accounts' ?
0
 
mikey250Author Commented:
Hi anyone before I close this thread can anyone simply a little more why I should not use the 'Built-in' account as what is the point of having it at all, unless it only gets used in paricular type companies like DOD or something so not sure!!?
0
 
mikey250Author Commented:
Hi Chev PCN,

Qns1. Before I close this question I wish to clarify something due to your first comments made:

"As the name implies - this folder is specifically for the pre-created "built-in" accounts."

You said that pretty much never I should use the 'built-in folder container and if this does not relate to 'pre-staging', can you give me an example of 'pre-created' as mentioned above, just so I know 'who' uses this ?

Thanks for the advice so far anyway, just wanted to clear that last part up!!
0
 
mikey250Author Commented:
As the name implies - this folder is specifically for the pre-created "built-in" accounts.


hi after reading through all expert comments aswell as my own ive decided to allocate points and close this thread.  Advice appreciateda
0
 
mikey250Author Commented:
oops add last comments without adding mine!

'As the name implies - this folder is specifically for the pre-created "built-in" accounts' - Although the word 'pre-created' sounds to me a lot like 'pre-staged', im assuming not, otherwise i can take on board what was advised and just avoid completely.

i will close this thread as the advice is sound!  appreciated.
0
 
mikey250Author Commented:
sound advice.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 7
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now