Solved

WIN 2008 32BIT - ADUC - BUILT-IN & USER QUERY

Posted on 2011-09-08
9
332 Views
Last Modified: 2012-08-13
Hi I normally create user accounts in the ADUC - User folder, but wanted to know when I should create in the Built-in folder?
0
Comment
Question by:mikey250
  • 7
  • 2
9 Comments
 
LVL 9

Accepted Solution

by:
Chev_PCN earned 500 total points
ID: 36501880
Pretty much never!
As the name implies - this folder is specifically for the pre-created "built-in" accounts.
One big risk of putting normal users into this OU would be that you cannot control them via GPO.  You should never apply any custom GPOs to that OU - it could have negative consequences across the whole domain.
0
 

Author Comment

by:mikey250
ID: 36502231
Hi Chev_PCN, I havent mentioned an 'OU' as not added one yet, but will do later!

Just to break down your comments, so I fully understand:

So if I was to create computer accounts on the server rather than joining them from the host pc, this is what is classed as 'Prestaging' presumably so I could then if I wanted to add them in the initally 'Built-in folder', - is that what you mean specifically?

You say 'one big risk of putting normal users into an OU would be that they could not be controlled via a GPO or at least presumably I would have problems so I should not bother as could have negative consequences across the whole domain?

So I should stick to ignoring the 'Built-in' folder, unless I know exactly what Im doing!!!!!!

Ok!!
0
 
LVL 9

Assisted Solution

by:Chev_PCN
Chev_PCN earned 500 total points
ID: 36502267
Hi Mikey.
I would advise not using the built-in container at all. (BTW, it's not an OU, my terminology error).
If you are prestaging, use the default computers container, and then move the computer account objects to the correct OU afterwards.
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 

Author Comment

by:mikey250
ID: 36502530
Thats what I mean!  I will ignore altogether!

Just as a last comment can you give me an example of 'pre-created accounts' ?
0
 

Author Comment

by:mikey250
ID: 36556626
Hi anyone before I close this thread can anyone simply a little more why I should not use the 'Built-in' account as what is the point of having it at all, unless it only gets used in paricular type companies like DOD or something so not sure!!?
0
 

Author Comment

by:mikey250
ID: 37326820
Hi Chev PCN,

Qns1. Before I close this question I wish to clarify something due to your first comments made:

"As the name implies - this folder is specifically for the pre-created "built-in" accounts."

You said that pretty much never I should use the 'built-in folder container and if this does not relate to 'pre-staging', can you give me an example of 'pre-created' as mentioned above, just so I know 'who' uses this ?

Thanks for the advice so far anyway, just wanted to clear that last part up!!
0
 

Author Comment

by:mikey250
ID: 37333843
As the name implies - this folder is specifically for the pre-created "built-in" accounts.


hi after reading through all expert comments aswell as my own ive decided to allocate points and close this thread.  Advice appreciateda
0
 

Author Comment

by:mikey250
ID: 37333846
oops add last comments without adding mine!

'As the name implies - this folder is specifically for the pre-created "built-in" accounts' - Although the word 'pre-created' sounds to me a lot like 'pre-staged', im assuming not, otherwise i can take on board what was advised and just avoid completely.

i will close this thread as the advice is sound!  appreciated.
0
 

Author Closing Comment

by:mikey250
ID: 37333848
sound advice.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question