+ Post New Thread
Results 1 to 6 of 6
Windows Server 2008 Thread, ADUC - where to put computer accounts in Technical; Hey all, I'm new to server 2008 and GP and we're having bizarre issues with slow logins that appear to ...
  1. #1

    Join Date
    Jun 2008
    Posts
    105
    Thank Post
    33
    Thanked 3 Times in 3 Posts
    Rep Power
    13

    Question ADUC - where to put computer accounts

    Hey all,

    I'm new to server 2008 and GP and we're having bizarre issues with slow logins that appear to be due to GP. Love GP Extensions, but this is nuts.

    Which leads me to my question - in a best practices scenario, should our computer accounts in AD be placed in the child OU's, and not left in the Computers OU?

    Right now, we have all the computer accounts where they are automatically created. GP seems to work, but is (of course) hard to troubleshoot. Could this be causing our slow login issue?

    Just trying to get some ideas - I know most of these questions can be answered by testing, which I'm definitely going to do as well.

    Thanks so much!

  2. #2


    Join Date
    Feb 2007
    Location
    Northamptonshire
    Posts
    4,687
    Thank Post
    352
    Thanked 794 Times in 714 Posts
    Rep Power
    346
    I always build a hierarchical organisation and move machines from the Computers OU to the relevant place so that the correct Group Policies apply.

  3. #3
    DrPerceptron's Avatar
    Join Date
    Dec 2008
    Location
    In a house
    Posts
    916
    Thank Post
    34
    Thanked 134 Times in 114 Posts
    Rep Power
    41
    Isn't the Computers "OU" actually a Container - thus can't apply any policies apart from the Default Domain Policy?

    If you're having slow logons - you could look into Environment Debugging - we've done some here in the last week and sorted out a lot of 30+ minute boot times. ( *shakes fist at WMI* )

  4. #4

    nephilim's Avatar
    Join Date
    Nov 2008
    Location
    Dunstable
    Posts
    11,751
    Thank Post
    1,622
    Thanked 1,876 Times in 1,394 Posts
    Blog Entries
    2
    Rep Power
    422
    We created our own OU's in regards to computers. It looks like this

    School Computers
    --ICT 1
    --ICT 2
    --LAPTOPS

    Each one has runs a default GPO within the school computers frame, then each room and laptops have there own individual GPO set up so that each room has specific settings.

  5. #5


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,572
    Thank Post
    228
    Thanked 851 Times in 730 Posts
    Rep Power
    294
    we usually set up ad looking roughly like this
    containers=red ou=blue object=black

    school.local
    |
    builtin
    computers
    foreign security principles
    users

    |
    curriculum computers
    |------
    -------|suite
    --------------|suitepc01
    -------|upstairs
    -------|downstairs
    -------|staff room
    curriculum users
    -------|2003
    -------|2004
    -------|staff
    -------|other
    staff domain laptops
    -------|Win Vista
    -------|win XP

    roughly i may have odd ones off there for say ms office (so suite would have an ms office 03 ou staff room would have an office 07 ou etc)(but i tend to do that using filters now) and i block inheritnce on staff domain laptops
    Last edited by sted; 14th October 2009 at 10:02 AM.

  6. #6
    bio
    bio is offline
    bio's Avatar
    Join Date
    Apr 2008
    Location
    netherlands
    Posts
    520
    Thank Post
    16
    Thanked 130 Times in 102 Posts
    Rep Power
    37
    Quote Originally Posted by kmount View Post
    I always build a hierarchical organisation and move machines from the Computers OU to the relevant place so that the correct Group Policies apply.
    same here

    bio..

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 1
    Last Post: 6th December 2007, 09:20 AM
  2. inactive computer accounts win2k3 server
    By joolsyjoolsy in forum Windows
    Replies: 5
    Last Post: 5th December 2007, 11:34 AM
  3. mac os x aduc intergration ?
    By mac_shinobi in forum Mac
    Replies: 4
    Last Post: 15th November 2007, 09:23 PM
  4. Replies: 3
    Last Post: 1st August 2007, 10:00 PM
  5. Replies: 4
    Last Post: 27th September 2006, 02:31 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •