Questions tagged [organizational-unit]
A unit of organization in Windows Server that organizes Users, Computers, and Printers.
78
questions
0
votes
0
answers
281
views
Remote Group Policy Update failed (Access Denied) for Domain Admin
My first question in ServerFault heya :)
In our domain manage all server and client machines with Microsoft Active Directory. We have 13 Vm Server. Domain\administrator user is Domain admin. I use it ...
- 1
1
vote
1
answer
691
views
Active Directory: pinpoint cause for access denied when modifying objects
I need a general way to determine the cause of access denied errors when modifying/moving/etc. objects in AD. I know that I can view "effective permissions" but not sure which permission ...
- 31
1
vote
2
answers
2k
views
Link a GPO to an OU or security group, Who will win?
Here's the scenario:
A GPO is linked to an OU to enable, for example, UAC setting.
However, since there are certain systems that require UAC to be disabled, there is a GPO that disables these settings....
- 11
0
votes
0
answers
53
views
Two days in the trenches.... How to delete google cloud organization? I'm setting up Gmail to Send WordPress Emails
How to delete google cloud organization?
Greetings from Nice, France,
I've got a question which I can't wait to hear what the solution is.... I'm setting up Gmail to Send WordPress Emails. I'm so ...
0
votes
2
answers
538
views
Windows Server 2016 Active Directory: Granting Admin to a User for only specific machines
I have granted local admin to several machines for an active directory user who requested / needed this access. I did not want to grant admin to the entire domain and server, but instead to only ...
0
votes
1
answer
1k
views
Active Directory Export/Import - Users, Group, OU's
I have a 2012 R2 domain controller and need to migrate all users, groups and OU's to a new domain controller. This new DC is in a completely different domain. I've exported the users, groups and OU's ...
- 688
1
vote
0
answers
332
views
Add an audit rule to an Active Directory Organizational Unit with powershell
In the powershell script below, I am collecting Active Directory audit rules for a specific OU, checking if any audit rules exist for a failure, and adding a failure audit rule if one does not exist. ...
- 113
0
votes
1
answer
800
views
Get and Add active directory domain OU audit rules with powershell
I would like to use powershell to script displaying and editing audit rules to Active Directory objects instead of operating through the GUI as described below:
From Active Directory Users and ...
- 113
1
vote
2
answers
169
views
How to delete temporary User account in AWS?
I have created a script to create user accounts under AWS Organizations.
Now,I am trying to automate deleting temporary user accounts in 30Min?
What could be the possible solutions? I can work on ...
- 23
0
votes
1
answer
65
views
Restricted abilities to Windows OU management
Our organization went through a recent change with security measures and I have a requirement, wondering if it could be implemented.
So, our team (let's say Jim, Tim, Johnny, Sonny and Mary) are ...
- 128
1
vote
1
answer
109
views
Windows Server 2019 - lost all computer from OU? [closed]
I keep computer accounts (Computers) in two separate OU units in Active Directory structure. This morning I had to add some users, and noticed that all machines are missing from their corresponding OU....
- 362
0
votes
1
answer
1k
views
How can we restore deleted Organization Unit or OU in windows server 2012
I deleted one of the Organization Unit from my windows server 2012r2,but now i want to restore it how i can i restore it,is it possible through LDP or something else.
1
vote
1
answer
2k
views
List AD Users that are part of Group Membership but in specific OU
I am trying to list AD users that are a member of a specific group but i need to search one ou at a time
Get-ADGroup 'GroupName' | Get-ADGroupMember
- 21
0
votes
0
answers
984
views
OU Name with 'slash' in title "suddenly(?)" rejected by Exchange 2013/0365 Hybrid
We recently migrated from Exchange 2007 to 0365 Hybrid with a 2013 server on-prem.
I'm reasonably sure I've made changes to users in the 'Web/IT' OU since the migration and not run into this error, ...
- 506
0
votes
1
answer
974
views
Unable to remove security group from OU advance permission due to inheritance + Active directory 2012
I am trying to remove one of the security group which has inherit permission on one of my OU in Active Directory.
When i click on remove i get the message " You cant remove xxx group (Domian\xxxgroup) ...
0
votes
1
answer
69
views
Can any user inside a organization remove a project?
Recently, I have created a project to apply full permissions on a such google account from my organization. I realized that any account could enter and destroy any project.
I don't know if this is an ...
google-cloud-platform
1
vote
1
answer
519
views
Microsoft SQL Server users from OU/SG
MSSQL has its own user authentication apart from the operating system or Active Directory user authentication but can I apply database permissions to organisational units or security groups or somehow ...
- 161
1
vote
1
answer
53
views
Move email addresses to company domain
My current setup is Exchange 2010 and I have 4 different organisational units setup. We have a number of users spread across these organisational units. We would like to now move to a single domain/...
0
votes
1
answer
2k
views
How to delegate permission to Mark OU Object as "Protected from Accidental Deletion"
I have created a new OU and delegated its permissions to multiple personnel; unfortunately, when they create a new OU underneath the previous one, the checkbox of "Protect from Accidental Deletion" is ...
- 827
0
votes
3
answers
4k
views
Can I put Security Groups into OU
Can I put a Security Group inside an OU?
If I put specific users into an OU, the GPOs applied to the OU works fine. If I put a Security Group (that contains the users) into the OU, the GPOs don't ...
- 21
0
votes
2
answers
210
views
Powershell reporting wrong info for Protected OU
Get-ADOrganizationalUnit -filter * -Properties ProtectedFromAccidentalDeletion | where {$_.ProtectedFromAccidentalDeletion -eq $false} | ft DistinguishedName,ProtectedFromAccidentalDeletion
Shows "...
- 31
1
vote
2
answers
17k
views
(GPO) Set AD-User as local admin on all PCs in specific OU
In my AD I have these two OU's: OU PC and OU User. There are a few users in the OU "Users" and several machines in the OU "PC".
I now need to write a GPO for one of these users which will ...
- 33
0
votes
0
answers
714
views
Can I safely change the OU for an AD DC? What about for a Shared Exchange Mailbox?
Running Windows Server 2012 R2 Active Directory Domain with Exchange Server 2013 CU13
I initially set up my Domain with a very basic structure, and just used the built-in default Users and Computers ...
- 1,614
1
vote
3
answers
943
views
GPO: Different GPOs for different users on different PCs
I would like to ask you, how to achieve having different GPO's for different user OUs on different PCs. I'm still a bit new to this. It's running Windows Server 2012 R2.
To understand our OU ...
- 45
0
votes
2
answers
5k
views
how to undo a GPO (Administrative Templates and Scheduled Tasks)
Windows Server 2012 R2 and Windows 10 Pro clients.
Sooooo... I was experimenting with OUs early in my AD and I accidentally applied a GPO to my entire domain which shouldn't have been.
I now need ...
- 1,614
3
votes
2
answers
3k
views
in AD, explain to me the benefits of putting users into OUs
Up until now I have just left all the users and computers in my domain in the domain root.
I've been considering how I might better organize my AD, but I don't see the advantage of using OUs yet.
...
- 1,614
5
votes
3
answers
23k
views
Windows server. The difference between organisation units and groups? (Active directory)
So they are both objects that you use to organise other objects. You can add users, groups and computers to both of them.
What is the difference between them?
What is the best way to divide users and ...
- 75
0
votes
0
answers
183
views
How To Enforce OU Policy Of Domain Policy?
I have a domain with 4 OUs in it. The domain level Policy sets security policy for the whole domain. In 2 of the lower OUs I want to overwrite some of the security settings with different settings ...
- 825
0
votes
1
answer
5k
views
How to Add a Computer or User to an OU in Group Policy Management Console (GPMC.msc)
On my Windows 2008R2 domain controller, I am trying to add computer objects into an organization unit (OU) in GPMC - so that I could apply a group policy objects (GPO) to that OU.
In GMPC I have ...
- 53
0
votes
1
answer
15k
views
GPO WMI filter not excluding computers
I have a GPO modifying user and computer configuration. On this GPO a WMI filter based on the hostname exclude some of the computers.
select Name from Win32_ComputerSystem where (Name <> "comp1-...
- 77
9
votes
1
answer
1k
views
Is it possible for a child domain and a OU in the parent domain to share the same name?
I'm adding this Q/A because I just stumbled upon this limitation
today, and I was not able to find any documentation about it; there
is an old KB article about this issue, but it's currently not
...
- 70.4k
4
votes
2
answers
6k
views
Error Creating OU: Name is Already In Use
I have an OU structure for computers that looks like this:
Workstations
|-- Building
| |-- Floor, Department, or Approximate Location
...
I want to create a child OU called "3 North" in ...
- 1,902
0
votes
1
answer
4k
views
Restrict Group Membership for users not from particular OU
I need to configure two type of users that can administer AD users and security groups:
Type 1 - Can only create users within particular OU.
Type 2 - Can only change group membership of users created ...
1
vote
0
answers
457
views
OU Search base in LDAP AD integration using CUCM
If i dont define an OU when creating user search bases in LDAP will it use the whole domain instead of a specific OU?
- 11
0
votes
0
answers
52
views
Syncronise only one container between Active Directory
I have a Microsoft Exchange server off-site and a file server on-site (with their own separate AD environment). I want to synchronise AD so that new users and password changes are reflected on both ...
- 350
0
votes
3
answers
8k
views
Blocking a website using GPO or Firewall in windows server 2012
Using windows server 2012, How to block any specific website on all browser using group policy?
2
votes
1
answer
1k
views
How can I correct my foreach loop in powershell for every Active Directory OU user?
Goal: Create a for or foreach loop to execute some code (in this case, just print x) for every user in an OU.
Im using powershell 2.0, with ActiveDirectory module.
So far: This is what I have (see ...
- 65
4
votes
1
answer
11k
views
Change AD users attributes via Power Shell script
In the domain I'm working we created an attribute "regulationMatrix" . When I try a powershell command like get-aduser USER -properties * that specific attribute shows up only if it has a value set ...
- 179
4
votes
3
answers
37k
views
Find out if password expired or when it expires for user in a specific OU
Is there any powershell command that outputs the users that have their passwords expired from a specific organizational unit (OU).
If so can it be combined in a script with another command that ...
- 179
2
votes
2
answers
688
views
Authorization using LDAP OU or Groups
In the below image I have drawn two schema structures for LDAP(Active Directory) I would like to know which one is correct.
In my organisation they are using Structure 1 design for PC login and ...
- 123
0
votes
1
answer
5k
views
infrastructureUpdate type OU called Infrastructure in Active Directory
A new OU called infrastructure with the type infrastructureUpdate has appeared in my Active Directory.
It has just appeared. I have been going through the setup recently and the last major thing I ...
- 135
1
vote
2
answers
594
views
How to find potential AD-groupname and OU-structure dependencies of eco-systems?
Currently we are in the process of redesigning our AD infrastructure. I am pretty concerned about the possible impact a change of several group- or OU-names might have to our eco-systems (like IAM ...
- 2,448
2
votes
1
answer
2k
views
Apply group policy to specific users (in an OU) on specific computers (not in an OU)
This has been bugging me for a while. Here's the setup:
We have ~20 Win2k8r2 servers. They are separated into various OUs that I can't change. I have created a security group "DevHostsSG" that ...
- 61
-2
votes
1
answer
3k
views
Target object for this command has incorrect format
I'm doing some 70-410 training and this script that I'm trying to run that I made keeps on failing due to an error that I receive that I stated in the topic. doesanyone see anything wrong in this:
...
- 9
0
votes
0
answers
1k
views
Using DSCONFIGAD to bind computer objects to a specific OU using a FQ LDAP DN
The DSCONFIGAD utility for OS X has a -OU parameter that allows one to generate and bind computer objects to a specified -OU via a FQ LDAP DN argument. This is taken directly from Apple's DSCONFIGAD ...
0
votes
1
answer
828
views
WSUS: organize computers
in my 2012R2 domain I need to organize efficiently clients and servers in WSUS. Who setup the domain created one group for each location, and each one is divided into operating systems:
Location 1
---...
- 31
1
vote
1
answer
272
views
How to make Group Policy to the same User Group at different Computer Groups? (VDI)
I made two Organizational Unit in my domain
Thin Clients (there are the physical computer objects)
Virtual Clients (there are the virtual computer objects)
And I have the default
Users (there are ...
- 133
5
votes
3
answers
8k
views
How can I create Organizational Units recursively on Powershell?
I'm writing a Powershell script to populate all the company users to a Active Directory from a CSV file.
The script uses the Powershell command New-ADUser and it should know, for every user, where is ...
- 199
4
votes
3
answers
27k
views
PowerShell - finding users who are Inactive AND not disabled
I wrote this cmdlet:
Search-ADAccount -filter {(enabled -eq $true)} -Users Only -SearchBase "ou=FirstOU,dc=domain,dc=com" -AccountInactive -TimeSpan 30
But it outputs an error:
Search-ADAccount : A ...
- 320
5
votes
1
answer
15k
views
PowerShell - Finding all of users' group memberships and kicking it out of them
as title says, I have to find all the groups that the user is a member of, and deleting its membership from all of them.
I've tried this:
get-adgroup -filter * | where {(Get-ADGroupMember $_ | ...
- 320