Windows Server 2008 R2 Thread, Seperate Organisational Unit for "Servers" in Technical; Morning, currently our setup (inherited) in AD is all the pcs/servers were in "Computers" now this is a knightmare when ...
24th February 2014, 09:00 AM #1
- Rep Power
Seperate Organisational Unit for "Servers"
Morning, currently our setup (inherited) in AD is all the pcs/servers were in "Computers" now this is a knightmare when applying group policy as everything set for the pcs applys to the servers aswell (WSUS etc...)
Now I have setup a "workstations" group for the Pcs which is working great, my question is, is it ok to have a OU For "servers"? (to put the member servers in) as well? currently there is the built in "Domain controllers" OU.
How do people have there's setup?
24th February 2014, 09:03 AM #2
It's fine and probably very sensible to do this.
24th February 2014, 09:19 AM #3
We use deeply nested OU's for everything. Makes targeting GPO's much, much simpler...
Originally Posted by maxrebo
......Network Admin Users
......Network Admin Groups
......Network Admin Workstations
...Sort of thing...
Last edited by tmcd35; 24th February 2014 at 09:22 AM.
24th February 2014, 03:42 PM #4
Yep, I have a Servers OU for exactly this purpose. Highly recommended. Just don't move the DCs out of the existing "Domain Controllers" OU unless you want a lot of pain.
24th February 2014, 04:21 PM #5
I have sub OUs as well under my server OU for different roles which may need different group policies or mostly I use it to target AV exceptions through SCCM with an OU query. You can use group membership for this as well but I prefer using OUs.
24th February 2014, 05:21 PM #6
And just to point out that the "Computers" container is not an OU so no GPO linking! You'll need to move all GPOs one level down to the new correct OUs or block inheritance on the new Servers OU.
Thanks to chazzy2501 from:
AngryTechnician (24th February 2014)
26th February 2014, 09:06 PM #7
- Rep Power
thanks guys, setup and working great
27th February 2014, 03:18 AM #8
I have a separate OU for servers. All other computers are under Workstations OU followed by the room. No separate OUs for staff/student computers as they often use the same. Start menus are loaded according to who logs on.
By oxide54 in forum Hardware
Last Post: 19th July 2010, 10:14 PM
By titch in forum Budgets and Expenditure
Last Post: 5th December 2008, 11:59 AM
By Jobos in forum Hardware
Last Post: 13th March 2008, 07:03 PM
By nicholab in forum Hardware
Last Post: 4th October 2007, 09:01 AM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)