A unit of organization in Windows Server that organizes Users, Computers, and Printers.

learn more… | top users | synonyms

2
votes
2answers
59 views

Authorization using LDAP OU or Groups

In the below image I have drawn two schema structures for LDAP(Active Directory) I would like to know which one is correct. In my organisation they are using Structure 1 design for PC login and ...
0
votes
1answer
38 views

infrastructureUpdate type OU called Infrastructure in Active Directory

A new OU called infrastructure with the type infrastructureUpdate has appeared in my Active Directory. It has just appeared. I have been going through the setup recently and the last major thing I ...
0
votes
0answers
66 views

LDAP Browser(Softerra) vs LDP.exe

Here is the issue; -> There is a Deny All(FullControll) set on 2 OUs for a service account. -> When i use LDP.exe to query those OUs, it can read their names but can not display any objects ...
1
vote
2answers
99 views

How to find potential AD-groupname and OU-structure dependencies of eco-systems?

Currently we are in the process of redesigning our AD infrastructure. I am pretty concerned about the possible impact a change of several group- or OU-names might have to our eco-systems (like IAM ...
1
vote
1answer
530 views

Apply group policy to specific users (in an OU) on specific computers (not in an OU)

This has been bugging me for a while. Here's the setup: We have ~20 Win2k8r2 servers. They are separated into various OUs that I can't change. I have created a security group "DevHostsSG" that ...
-2
votes
1answer
216 views

Target object for this command has incorrect format

I'm doing some 70-410 training and this script that I'm trying to run that I made keeps on failing due to an error that I receive that I stated in the topic. doesanyone see anything wrong in this: ...
0
votes
0answers
137 views

Using DSCONFIGAD to bind computer objects to a specific OU using a FQ LDAP DN

The DSCONFIGAD utility for OS X has a -OU parameter that allows one to generate and bind computer objects to a specified -OU via a FQ LDAP DN argument. This is taken directly from Apple's DSCONFIGAD ...
0
votes
1answer
139 views

WSUS: organize computers

in my 2012R2 domain I need to organize efficiently clients and servers in WSUS. Who setup the domain created one group for each location, and each one is divided into operating systems: Location 1 ...
1
vote
1answer
93 views

How to make Group Policy to the same User Group at different Computer Groups? (VDI)

I made two Organizational Unit in my domain Thin Clients (there are the physical computer objects) Virtual Clients (there are the virtual computer objects) And I have the default Users (there ...
3
votes
1answer
2k views

How can I create Organizational Units recursively on Powershell?

I'm writing a Powershell script to populate all the company users to a Active Directory from a CSV file. The script uses the Powershell command New-ADUser and it should know, for every user, where is ...
2
votes
2answers
6k views

PowerShell - finding users who are Inactive AND not disabled

I wrote this cmdlet: Search-ADAccount -filter {(enabled -eq $true)} -Users Only -SearchBase "ou=FirstOU,dc=domain,dc=com" -AccountInactive -TimeSpan 30 But it outputs an error: Search-ADAccount : ...
4
votes
1answer
11k views

PowerShell - Finding all of users' group memberships and kicking it out of them

as title says, I have to find all the groups that the user is a member of, and deleting its membership from all of them. I've tried this: get-adgroup -filter * | where {(Get-ADGroupMember $_ | ...
3
votes
2answers
12k views

PowerShell - Limit the search to only one OU

Ive got this cmdlet and I'd like to limit the results to only one OU: Get-ADUser -Filter {(Enabled -eq $false)} | ? { ($_.distinguishedname -notlike '*Disabled Users*') } Now Ive tried to use ...
3
votes
3answers
6k views

PowerShell script that should find disabled users that are not in a specific OU outputs users from that OU as well

Hey I've got this cmdlet here: Get-ADUser -filter {(distinguishedName -notlike "Disabled Users") -and (enabled -eq $false)} -searchBase "ou=FirstOU,dc=domain,dc=com" I've built it to find disabled ...
0
votes
2answers
2k views

Powershell - check if all users in a specific OU are disabled, disable if not

I tried to search for it but I didn't find anything. Could someone help me out with an example of a script that would do this?
2
votes
2answers
1k views

Mapped Drive by OU

I want to implement a mapped drive which is hidden/exposed based on the OU of the user. I have a working version of this in one environment (Windows 2008R2; created by someone else), and I am trying ...
2
votes
1answer
119 views

Structuring an OU to properly model an Organizational Hierarchy

I'm experimenting with using OUs in my network's Active Directory and group policy. However, I'm having a little trouble figuring out the right way to structure my OUs so that I can have individual ...
3
votes
1answer
380 views

Applying a group policy at the domain level and scoping vs. applying at the OU level

The way I see it, if I have a GPO and want to apply it, 2 options I have are: Linking the GPO to the domain and then scoping to security groups and maybe users Linking the GPO to an OU that contains ...
0
votes
1answer
130 views

Powershell - query non-standard group members in an OU?

I am looking to create a script which will only show users in an OU who are members of "non-standard" groups. For example, all users in the "Accounting" OU will be members of at least one group with ...
1
vote
1answer
139 views

Complex Group Policy Inheritance

I'm currently trying to design the OU and Group design for a new AD deployment. Firstly, taxonomy is hard. As a first guess attempt, we're trying to keep all User objects together in OU=Users, and ...
1
vote
1answer
238 views

assign an OU to a certain RODC

I have a RWDC(A) and two RODC(B and C).i create an OU for each branch in RWDC however the OU and it's content will be replicated to all DCs within the domain. So I want to know can we assign an OU to ...
0
votes
1answer
651 views

Cant find “Read Lockout Time” and “Write Lockout Time” for delegation on OU

Trying to delegate permissions to a group on a OU; but cant find 2 properties in special permissions for "User Objects" they are "Read Lockout Time" and "Write Lockout Time" any reason i couldnt see ...
1
vote
1answer
723 views

Difference between “Descendant User Objects” and just “User Objects”

i am trying to delegate permissions on a cetain OU to a certain group. All i find is "Descendatn User Objects" and not just "User Objects" ; we have those available in other domain; please do let me ...
4
votes
2answers
843 views

In LDAP is it best to nest groups under organizational units or create an organization unit directly under the root dn just for groups?

I'm not sure whether it's better to nest groups under each of my organizational units or to make an organization unit directly under the root DN just for groups. Is one considered best practice over ...
1
vote
2answers
1k views

Can I move these items around in active directory

I am just reorganising my companies active directory structure, as it hasn't kept up with changes in the company structure. There are a few items I am not sure if I can move or not. Can anyone tell ...
1
vote
1answer
335 views

Ldap query on single subOU for Alfresco

this is what my ldap looks like : red.lan Groups(OU) Computers(SubOU) Printers(SubOU) Users(SubOU) Some(OU) Users(OU) SomeOther(SubOU) So, i'm trying to ...
1
vote
1answer
283 views

GPO defining a user policy is being applied, despite being linked to a computer OU (without loopback processing)

I must be missing something obvious here. We have a GPO linked to a computer OU. The GPO runs a VB logon script (a user policy) when users log on. I was just about to enable loopback processing on ...
7
votes
4answers
2k views

GPO not applying to an OU

We have a batch file (logon.bat) that maps drives whenever a user logs on. This script is applied by Group Policy to the entire domain. Initially, this worked perfectly, as we always wanted this ...
1
vote
1answer
261 views

Restricting particular OUs from accessing Active Directory folder

I know how to restrict individual users from accessing/reading OUs or folders in Active Directory. This page provides a good guide on how to do this. But how can one bar the users of an entire OU, ...
4
votes
1answer
2k views

Join VM to specific Active Directory OU using System Center VMM 2012 Guest OS Profile

We use System Center 2012 Virtual Machine Manager to deploy VMs to our Hyper-V servers. We are starting to use the VM and Service templates to automate our system deployments, but one step we need to ...
1
vote
2answers
2k views

Putting a shortcut on the desktop of all the people in a particular OU?

At work we have all the user desktops redirected to a server. Within a all the users in an OU I need to put the same shortcut on all of their desktops. Is there an easier way to do this than just ...
0
votes
1answer
69 views

Tips on organizing Active Directory for a global company with different departments [closed]

I have started to read and implement some of the basic domain architecture implementation, one of the question I have is what is the latest trend in organizing the active directory OU's, Groups and ...
1
vote
0answers
31 views

How to give Admins Access to move users to a Single OU [duplicate]

We are delegating few acceses to some admins via taskpads; So we created a OU called "Delete" and we want the admins to move all the users to be deleted to that OU; How can we do that , how can we ...
1
vote
1answer
290 views

Can users added to certain OU automatically be member of particular group

Windows Server 2008 R2. Can AD be set up so that any user added to a particular OU automatically be assigned to a particular user group?
1
vote
2answers
1k views

Set Organizational Unit by IP Address in Active Directory

Our AD is a mess, and I've been trying to look for a way to automatically assign computers/workstations to an Organizational Unit based on their IP address. I've had no luck, though, in finding any ...
4
votes
1answer
361 views

Server 2008: Link security group to organisational unit

I've created a test domain with 2 VM's to experiment and try to gain some knowledge using Server 2008 (+GPO's, OU's, ADUC etc) however I've become a little stuck. I've created an OU called User ...
5
votes
2answers
6k views

Do I need child domains in AD?

I have a an organization having HQ(about 150 users) in one city and 16 branches (high schools, 300-400 users each) each in different city. What I have to do is create a domain(s) in AD for corporate ...
4
votes
3answers
19k views

How do you override a GPO with another GPO?

If there is a GPO which is applied to all Domain Computers which disables something, is there a way to re-enable the disabled thing for some hosts in the domain, without taking those hosts out of the ...
1
vote
2answers
526 views

Cannot change default OU for new Distribution Groups in Exchange 2010

I'm trying to use the following command to set the default OU for new distribution groups in Exchange 2010: Set-OrganizationConfig -DistributioNGroupDefaultOU 'corp.company.com/Employees/MailingList' ...
2
votes
3answers
2k views

GPO - Restricted Groups applying, but don't actually add the group

The following scenario is weird. Please be advised. I have created a GPO on an OU containing workstations like this: This GPO purpose is to make the Backup Operators group a member of the local ...