A unit of organization in Windows Server that organizes Users, Computers, and Printers.

learn more… | top users | synonyms

-2
votes
1answer
39 views

Target object for this command has incorrect format

I'm doing some 70-410 training and this script that I'm trying to run that I made keeps on failing due to an error that I receive that I stated in the topic. doesanyone see anything wrong in this: ...
0
votes
0answers
34 views

Using DSCONFIGAD to bind computer objects to a specific OU using a FQ LDAP DN

The DSCONFIGAD utility for OS X has a -OU parameter that allows one to generate and bind computer objects to a specified -OU via a FQ LDAP DN argument. This is taken directly from Apple's DSCONFIGAD ...
0
votes
1answer
35 views

WSUS: organize computers

in my 2012R2 domain I need to organize efficiently clients and servers in WSUS. Who setup the domain created one group for each location, and each one is divided into operating systems: Location 1 ...
1
vote
1answer
45 views

How to make Group Policy to the same User Group at different Computer Groups? (VDI)

I made two Organizational Unit in my domain Thin Clients (there are the physical computer objects) Virtual Clients (there are the virtual computer objects) And I have the default Users (there ...
3
votes
1answer
369 views

How can I create Organizational Units recursively on Powershell?

I'm writing a Powershell script to populate all the company users to a Active Directory from a CSV file. The script uses the Powershell command New-ADUser and it should know, for every user, where is ...
1
vote
2answers
2k views

PowerShell - finding users who are Inactive AND not disabled

I wrote this cmdlet: Search-ADAccount -filter {(enabled -eq $true)} -Users Only -SearchBase "ou=FirstOU,dc=domain,dc=com" -AccountInactive -TimeSpan 30 But it outputs an error: Search-ADAccount : ...
4
votes
1answer
5k views

PowerShell - Finding all of users' group memberships and kicking it out of them

as title says, I have to find all the groups that the user is a member of, and deleting its membership from all of them. I've tried this: get-adgroup -filter * | where {(Get-ADGroupMember $_ | ...
2
votes
2answers
3k views

PowerShell - Limit the search to only one OU

Ive got this cmdlet and I'd like to limit the results to only one OU: Get-ADUser -Filter {(Enabled -eq $false)} | ? { ($_.distinguishedname -notlike '*Disabled Users*') } Now Ive tried to use ...
3
votes
3answers
3k views

PowerShell script that should find disabled users that are not in a specific OU outputs users from that OU as well

Hey I've got this cmdlet here: Get-ADUser -filter {(distinguishedName -notlike "Disabled Users") -and (enabled -eq $false)} -searchBase "ou=FirstOU,dc=domain,dc=com" I've built it to find disabled ...
0
votes
1answer
1k views

Powershell - check if all users in a specific OU are disabled, disable if not

I tried to search for it but I didn't find anything. Could someone help me out with an example of a script that would do this?
1
vote
2answers
630 views

Mapped Drive by OU

I want to implement a mapped drive which is hidden/exposed based on the OU of the user. I have a working version of this in one environment (Windows 2008R2; created by someone else), and I am trying ...
2
votes
1answer
88 views

Structuring an OU to properly model an Organizational Hierarchy

I'm experimenting with using OUs in my network's Active Directory and group policy. However, I'm having a little trouble figuring out the right way to structure my OUs so that I can have individual ...
3
votes
1answer
138 views

Applying a group policy at the domain level and scoping vs. applying at the OU level

The way I see it, if I have a GPO and want to apply it, 2 options I have are: Linking the GPO to the domain and then scoping to security groups and maybe users Linking the GPO to an OU that contains ...
0
votes
1answer
94 views

Powershell - query non-standard group members in an OU?

I am looking to create a script which will only show users in an OU who are members of "non-standard" groups. For example, all users in the "Accounting" OU will be members of at least one group with ...
1
vote
1answer
99 views

Complex Group Policy Inheritance

I'm currently trying to design the OU and Group design for a new AD deployment. Firstly, taxonomy is hard. As a first guess attempt, we're trying to keep all User objects together in OU=Users, and ...
1
vote
1answer
113 views

assign an OU to a certain RODC

I have a RWDC(A) and two RODC(B and C).i create an OU for each branch in RWDC however the OU and it's content will be replicated to all DCs within the domain. So I want to know can we assign an OU to ...
0
votes
1answer
375 views

Cant find “Read Lockout Time” and “Write Lockout Time” for delegation on OU

Trying to delegate permissions to a group on a OU; but cant find 2 properties in special permissions for "User Objects" they are "Read Lockout Time" and "Write Lockout Time" any reason i couldnt see ...
1
vote
1answer
311 views

Difference between “Descendant User Objects” and just “User Objects”

i am trying to delegate permissions on a cetain OU to a certain group. All i find is "Descendatn User Objects" and not just "User Objects" ; we have those available in other domain; please do let me ...
4
votes
2answers
321 views

In LDAP is it best to nest groups under organizational units or create an organization unit directly under the root dn just for groups?

I'm not sure whether it's better to nest groups under each of my organizational units or to make an organization unit directly under the root DN just for groups. Is one considered best practice over ...
1
vote
2answers
741 views

Can I move these items around in active directory

I am just reorganising my companies active directory structure, as it hasn't kept up with changes in the company structure. There are a few items I am not sure if I can move or not. Can anyone tell ...
1
vote
1answer
207 views

Ldap query on single subOU for Alfresco

this is what my ldap looks like : red.lan Groups(OU) Computers(SubOU) Printers(SubOU) Users(SubOU) Some(OU) Users(OU) SomeOther(SubOU) So, i'm trying to ...
1
vote
1answer
141 views

GPO defining a user policy is being applied, despite being linked to a computer OU (without loopback processing)

I must be missing something obvious here. We have a GPO linked to a computer OU. The GPO runs a VB logon script (a user policy) when users log on. I was just about to enable loopback processing on ...
6
votes
4answers
932 views

GPO not applying to an OU

We have a batch file (logon.bat) that maps drives whenever a user logs on. This script is applied by Group Policy to the entire domain. Initially, this worked perfectly, as we always wanted this ...
1
vote
1answer
105 views

Restricting particular OUs from accessing Active Directory folder

I know how to restrict individual users from accessing/reading OUs or folders in Active Directory. This page provides a good guide on how to do this. But how can one bar the users of an entire OU, ...
2
votes
1answer
2k views

Join VM to specific Active Directory OU using System Center VMM 2012 Guest OS Profile

We use System Center 2012 Virtual Machine Manager to deploy VMs to our Hyper-V servers. We are starting to use the VM and Service templates to automate our system deployments, but one step we need to ...
1
vote
2answers
1k views

Putting a shortcut on the desktop of all the people in a particular OU?

At work we have all the user desktops redirected to a server. Within a all the users in an OU I need to put the same shortcut on all of their desktops. Is there an easier way to do this than just ...
0
votes
1answer
65 views

Tips on organizing Active Directory for a global company with different departments [closed]

I have started to read and implement some of the basic domain architecture implementation, one of the question I have is what is the latest trend in organizing the active directory OU's, Groups and ...
1
vote
0answers
31 views

How to give Admins Access to move users to a Single OU [duplicate]

We are delegating few acceses to some admins via taskpads; So we created a OU called "Delete" and we want the admins to move all the users to be deleted to that OU; How can we do that , how can we ...
1
vote
1answer
188 views

Can users added to certain OU automatically be member of particular group

Windows Server 2008 R2. Can AD be set up so that any user added to a particular OU automatically be assigned to a particular user group?
1
vote
2answers
1k views

Set Organizational Unit by IP Address in Active Directory

Our AD is a mess, and I've been trying to look for a way to automatically assign computers/workstations to an Organizational Unit based on their IP address. I've had no luck, though, in finding any ...
4
votes
1answer
272 views

Server 2008: Link security group to organisational unit

I've created a test domain with 2 VM's to experiment and try to gain some knowledge using Server 2008 (+GPO's, OU's, ADUC etc) however I've become a little stuck. I've created an OU called User ...
5
votes
2answers
4k views

Do I need child domains in AD?

I have a an organization having HQ(about 150 users) in one city and 16 branches (high schools, 300-400 users each) each in different city. What I have to do is create a domain(s) in AD for corporate ...
2
votes
3answers
14k views

How do you override a GPO with another GPO?

If there is a GPO which is applied to all Domain Computers which disables something, is there a way to re-enable the disabled thing for some hosts in the domain, without taking those hosts out of the ...
1
vote
1answer
397 views

Cannot change default OU for new Distribution Groups in Exchange 2010

I'm trying to use the following command to set the default OU for new distribution groups in Exchange 2010: Set-OrganizationConfig -DistributioNGroupDefaultOU 'corp.company.com/Employees/MailingList' ...
2
votes
3answers
2k views

GPO - Restricted Groups applying, but don't actually add the group

The following scenario is weird. Please be advised. I have created a GPO on an OU containing workstations like this: This GPO purpose is to make the Backup Operators group a member of the local ...