Solved

WIN 2008 32BIT - ADUC - BUILT-IN & USER QUERY

Posted on 2011-09-08
9
330 Views
Last Modified: 2012-08-13
Hi I normally create user accounts in the ADUC - User folder, but wanted to know when I should create in the Built-in folder?
0
Comment
Question by:mikey250
  • 7
  • 2
9 Comments
 
LVL 9

Accepted Solution

by:
Chev_PCN earned 500 total points
Comment Utility
Pretty much never!
As the name implies - this folder is specifically for the pre-created "built-in" accounts.
One big risk of putting normal users into this OU would be that you cannot control them via GPO.  You should never apply any custom GPOs to that OU - it could have negative consequences across the whole domain.
0
 

Author Comment

by:mikey250
Comment Utility
Hi Chev_PCN, I havent mentioned an 'OU' as not added one yet, but will do later!

Just to break down your comments, so I fully understand:

So if I was to create computer accounts on the server rather than joining them from the host pc, this is what is classed as 'Prestaging' presumably so I could then if I wanted to add them in the initally 'Built-in folder', - is that what you mean specifically?

You say 'one big risk of putting normal users into an OU would be that they could not be controlled via a GPO or at least presumably I would have problems so I should not bother as could have negative consequences across the whole domain?

So I should stick to ignoring the 'Built-in' folder, unless I know exactly what Im doing!!!!!!

Ok!!
0
 
LVL 9

Assisted Solution

by:Chev_PCN
Chev_PCN earned 500 total points
Comment Utility
Hi Mikey.
I would advise not using the built-in container at all. (BTW, it's not an OU, my terminology error).
If you are prestaging, use the default computers container, and then move the computer account objects to the correct OU afterwards.
0
 

Author Comment

by:mikey250
Comment Utility
Thats what I mean!  I will ignore altogether!

Just as a last comment can you give me an example of 'pre-created accounts' ?
0
Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

 

Author Comment

by:mikey250
Comment Utility
Hi anyone before I close this thread can anyone simply a little more why I should not use the 'Built-in' account as what is the point of having it at all, unless it only gets used in paricular type companies like DOD or something so not sure!!?
0
 

Author Comment

by:mikey250
Comment Utility
Hi Chev PCN,

Qns1. Before I close this question I wish to clarify something due to your first comments made:

"As the name implies - this folder is specifically for the pre-created "built-in" accounts."

You said that pretty much never I should use the 'built-in folder container and if this does not relate to 'pre-staging', can you give me an example of 'pre-created' as mentioned above, just so I know 'who' uses this ?

Thanks for the advice so far anyway, just wanted to clear that last part up!!
0
 

Author Comment

by:mikey250
Comment Utility
As the name implies - this folder is specifically for the pre-created "built-in" accounts.


hi after reading through all expert comments aswell as my own ive decided to allocate points and close this thread.  Advice appreciateda
0
 

Author Comment

by:mikey250
Comment Utility
oops add last comments without adding mine!

'As the name implies - this folder is specifically for the pre-created "built-in" accounts' - Although the word 'pre-created' sounds to me a lot like 'pre-staged', im assuming not, otherwise i can take on board what was advised and just avoid completely.

i will close this thread as the advice is sound!  appreciated.
0
 

Author Closing Comment

by:mikey250
Comment Utility
sound advice.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now