At the company I am doing work for at the moment I am setting up a new server. It's going to be running Microsoft Server 2008 and be used as a domain controller with the DNS pointing to OpenDNS for filtering etc.
The orginisation is a medical practice with the usual levels of employee, such as:
- Company Directors
- Reception Staff
- Office/Admin Staff
- Work Experience Users
I have set the server up on Microsoft Server 2003, but it has since been decided that before we go any further we should upgrade/reinstall to Microsoft Server 2008. I thought this would be an ideal time to clarify the 'normal' way of setting the users up.
Currently, each of the above levels of employee are Organisational Units. I did this because it appeared I could set the GPO etc. from the Organisational Unit level, rather than selecting all users within a Group and then applying the GPO that way.
Is this correct, can Organisational Units be used for User level orginisation - or - are they intended for location based organisation, such as Office 1, Reception etc.?