Windows Thread, Windows 2000 AD users folder in Technical; I have recently taken over a windows 2000 server, all the users (about 50 of them) have been created in ...
24th February 2008, 01:46 PM #1
- Rep Power
Windows 2000 AD users folder
I have recently taken over a windows 2000 server, all the users (about 50 of them) have been created in the users folder in Active Directory, unfortunately this stops me from applying any group policies.
If I move the users to a newly created OU what will be the consequences, baring in mind that there wont be any GP's on them anyway willit affect any other areas of each user account.
24th February 2008, 01:51 PM #2
You can't add policies to the Users folder, only OUs. I am 99.9% sure you will have no problems. If you have service accounts there there, you might have a few if you move them. If you have service accounts, you might have a few if you move them. For example, if you have Websense and you are filtering by AD. Websense needs to know exactly where the service account is located.
Last edited by FN-GM; 24th February 2008 at 01:54 PM.
24th February 2008, 01:53 PM #3
That's a first, I've never seent that before! If you're just creating a new OU and moving those end users everything should be absolutely fine. Of course users will begin to see changes once you start tweaking Group Policy.
I would also check what security groups they're a member of. There's a high probability they could all be domain administrators!!!!!!
Only administrator accounts and service accounts should be in the Users folder.
24th February 2008, 01:55 PM #4
If there are no GPOs applied to the default user folder then only the default domain policy should be having an effect. So creating an new OU and moving the users there wouldn't affect them.
Do you have an XP client available that you can remotely manage the server from download Microsoft Group Policy Management Console (GPMC)?
With this you can get a clearer idea of what GPOs are in place and model the effect of implementing any new GPOs.
24th February 2008, 07:41 PM #5
- Rep Power
Thanks for the replies
I dont think that the GPMC will run on win2k server (or so i heard) havent tried it though...
ive checked the users and they're not domain admins its a very simple setup just whoever did it didnt bother with OU's as i guess they didnt want or didnt know about Group Policies.
Anyway, thanks for your help I will transfer over a couple of users that are no longer used first just in case..
24th February 2008, 07:57 PM #6
Indeed it does not but you don't have to use a Win 2K box to manage your network... just install adminpak and GPMC on an XP client and you will be good to go.
Originally Posted by iownitcouk
Last Post: 2nd February 2008, 10:03 PM
By lovelldr in forum Windows
Last Post: 6th August 2007, 11:17 AM
By markcuk in forum How do you do....it?
Last Post: 25th April 2007, 11:38 AM
By DaveP in forum Windows
Last Post: 2nd November 2006, 04:23 PM
By crc-ict in forum Windows
Last Post: 31st March 2006, 11:05 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)