Seperate Organisational Unit for "Servers"

[maxrebo]

Morning, currently our setup (inherited) in AD is all the pcs/servers were in "Computers" now this is a knightmare when applying group policy as everything set for the pcs applys to the servers aswell (WSUS etc...)

Now I have setup a "workstations" group for the Pcs which is working great, my question is, is it ok to have a OU For "servers"? (to put the member servers in) as well? currently there is the built in "Domain controllers" OU.

How do people have there's setup?

 

Thanks

[pantscat]

Yes, absolutely.

 

It's fine and probably very sensible to do this.

[tmcd35]

How do people have there's setup?

 

Thanks

 

We use deeply nested OU's for everything. Makes targeting GPO's much, much simpler...

 

Whole School

...Computers

......Staff

.........

...... Students

.........

...Users

......Staff

.........Admin

.........Teaching

............

.........Students

............

............Exams

...Groups

......Security

......E-Mail

...Terminal Servers

...Network

......Network Admin Users

......Network Admin Groups

......Network Admin Workstations

......Servers

 

 

...Sort of thing...

Edited February 24, 2014 by tmcd35

[AngryTechnician]

Yep, I have a Servers OU for exactly this purpose. Highly recommended. Just don't move the DCs out of the existing "Domain Controllers" OU unless you want a lot of pain.

[ChrisH]

I have sub OUs as well under my server OU for different roles which may need different group policies or mostly I use it to target AV exceptions through SCCM with an OU query. You can use group membership for this as well but I prefer using OUs.

[chazzy2501]

And just to point out that the "Computers" container is not an OU so no GPO linking! You'll need to move all GPOs one level down to the new correct OUs or block inheritance on the new Servers OU.

[maxrebo]

thanks guys, setup and working great

[detjo]

I have a separate OU for servers. All other computers are under Workstations OU followed by the room. No separate OUs for staff/student computers as they often use the same. Start menus are loaded according to who logs on.