Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [organizational-unit]

A unit of organization in Windows Server that organizes Users, Computers, and Printers.

0
votes
1answer
33 views

How can we restore deleted Organization Unit or OU in windows server 2012

I deleted one of the Organization Unit from my windows server 2012r2,but now i want to restore it how i can i restore it,is it possible through LDP or something else.
1
vote
1answer
55 views

List AD Users that are part of Group Membership but in specific OU

I am trying to list AD users that are a member of a specific group but i need to search one ou at a time Get-ADGroup 'GroupName' | Get-ADGroupMember
0
votes
0answers
141 views

OU Name with 'slash' in title “suddenly(?)” rejected by Exchange 2013/0365 Hybrid

We recently migrated from Exchange 2007 to 0365 Hybrid with a 2013 server on-prem. I'm reasonably sure I've made changes to users in the 'Web/IT' OU since the migration and not run into this error, ...
0
votes
1answer
375 views

Unable to remove security group from OU advance permission due to inheritance + Active directory 2012

I am trying to remove one of the security group which has inherit permission on one of my OU in Active Directory. When i click on remove i get the message " You cant remove xxx group (Domian\xxxgroup) ...
0
votes
1answer
46 views

Can any user inside a organization remove a project?

Recently, I have created a project to apply full permissions on a such google account from my organization. I realized that any account could enter and destroy any project. I don't know if this is an ...
1
vote
1answer
115 views

Microsoft SQL Server users from OU/SG

MSSQL has its own user authentication apart from the operating system or Active Directory user authentication but can I apply database permissions to organisational units or security groups or somehow ...
1
vote
1answer
50 views

Move email addresses to company domain

My current setup is Exchange 2010 and I have 4 different organisational units setup. We have a number of users spread across these organisational units. We would like to now move to a single domain/...
0
votes
1answer
764 views

How to delegate permission to Mark OU Object as “Protected from Accidental Deletion”

I have created a new OU and delegated its permissions to multiple personnel; unfortunately, when they create a new OU underneath the previous one, the checkbox of "Protect from Accidental Deletion" is ...
0
votes
3answers
791 views

Can I put Security Groups into OU

Can I put a Security Group inside an OU? If I put specific users into an OU, the GPOs applied to the OU works fine. If I put a Security Group (that contains the users) into the OU, the GPOs don't ...
0
votes
2answers
132 views

Powershell reporting wrong info for Protected OU

Get-ADOrganizationalUnit -filter * -Properties ProtectedFromAccidentalDeletion | where {$_.ProtectedFromAccidentalDeletion -eq $false} | ft DistinguishedName,ProtectedFromAccidentalDeletion Shows "...
1
vote
2answers
10k views

(GPO) Set AD-User as local admin on all PCs in specific OU

In my AD I have these two OU's: OU PC and OU User. There are a few users in the OU "Users" and several machines in the OU "PC". I now need to write a GPO for one of these users which will ...
0
votes
0answers
363 views

Can I safely change the OU for an AD DC? What about for a Shared Exchange Mailbox?

Running Windows Server 2012 R2 Active Directory Domain with Exchange Server 2013 CU13 I initially set up my Domain with a very basic structure, and just used the built-in default Users and Computers ...
1
vote
3answers
484 views

GPO: Different GPOs for different users on different PCs

I would like to ask you, how to achieve having different GPO's for different user OUs on different PCs. I'm still a bit new to this. It's running Windows Server 2012 R2. To understand our OU ...
0
votes
2answers
1k views

how to undo a GPO (Administrative Templates and Scheduled Tasks)

Windows Server 2012 R2 and Windows 10 Pro clients. Sooooo... I was experimenting with OUs early in my AD and I accidentally applied a GPO to my entire domain which shouldn't have been. I now need ...
3
votes
2answers
1k views

in AD, explain to me the benefits of putting users into OUs

Up until now I have just left all the users and computers in my domain in the domain root. I've been considering how I might better organize my AD, but I don't see the advantage of using OUs yet. ...
3
votes
3answers
3k views

Windows server. The difference between organisation units and groups? (Active directory)

So they are both objects that you use to organise other objects. You can add users, groups and computers to both of them. What is the difference between them? What is the best way to divide users and ...
0
votes
0answers
137 views

How To Enforce OU Policy Of Domain Policy?

I have a domain with 4 OUs in it. The domain level Policy sets security policy for the whole domain. In 2 of the lower OUs I want to overwrite some of the security settings with different settings ...
0
votes
1answer
2k views

How to Add a Computer or User to an OU in Group Policy Management Console (GPMC.msc)

On my Windows 2008R2 domain controller, I am trying to add computer objects into an organization unit (OU) in GPMC - so that I could apply a group policy objects (GPO) to that OU. In GMPC I have ...
0
votes
1answer
6k views

GPO WMI filter not excluding computers

I have a GPO modifying user and computer configuration. On this GPO a WMI filter based on the hostname exclude some of the computers. select Name from Win32_ComputerSystem where (Name <> "comp1-...
9
votes
1answer
580 views

Is it possible for a child domain and a OU in the parent domain to share the same name?

I'm adding this Q/A because I just stumbled upon this limitation today, and I was not able to find any documentation about it; there is an old KB article about this issue, but it's currently not ...
3
votes
1answer
2k views

Error Creating OU: Name is Already In Use

I have an OU structure for computers that looks like this: Workstations |-- Building | |-- Floor, Department, or Approximate Location ... I want to create a child OU called "3 North" in ...
0
votes
1answer
2k views

Restrict Group Membership for users not from particular OU

I need to configure two type of users that can administer AD users and security groups: Type 1 - Can only create users within particular OU. Type 2 - Can only change group membership of users created ...
1
vote
0answers
348 views

OU Search base in LDAP AD integration using CUCM

If i dont define an OU when creating user search bases in LDAP will it use the whole domain instead of a specific OU?
0
votes
0answers
41 views

Syncronise only one container between Active Directory

I have a Microsoft Exchange server off-site and a file server on-site (with their own separate AD environment). I want to synchronise AD so that new users and password changes are reflected on both ...
0
votes
3answers
4k views

Blocking a website using GPO or Firewall in windows server 2012

Using windows server 2012, How to block any specific website on all browser using group policy?
2
votes
1answer
417 views

How can I correct my foreach loop in powershell for every Active Directory OU user?

Goal: Create a for or foreach loop to execute some code (in this case, just print x) for every user in an OU. Im using powershell 2.0, with ActiveDirectory module. So far: This is what I have (see ...
4
votes
1answer
10k views

Change AD users attributes via Power Shell script

In the domain I'm working we created an attribute "regulationMatrix" . When I try a powershell command like get-aduser USER -properties * that specific attribute shows up only if it has a value set ...
4
votes
3answers
30k views

Find out if password expired or when it expires for user in a specific OU

Is there any powershell command that outputs the users that have their passwords expired from a specific organizational unit (OU). If so can it be combined in a script with another command that ...
2
votes
2answers
453 views

Authorization using LDAP OU or Groups

In the below image I have drawn two schema structures for LDAP(Active Directory) I would like to know which one is correct. In my organisation they are using Structure 1 design for PC login and ...
0
votes
1answer
2k views

infrastructureUpdate type OU called Infrastructure in Active Directory

A new OU called infrastructure with the type infrastructureUpdate has appeared in my Active Directory. It has just appeared. I have been going through the setup recently and the last major thing I ...
1
vote
2answers
442 views

How to find potential AD-groupname and OU-structure dependencies of eco-systems?

Currently we are in the process of redesigning our AD infrastructure. I am pretty concerned about the possible impact a change of several group- or OU-names might have to our eco-systems (like IAM ...
2
votes
1answer
2k views

Apply group policy to specific users (in an OU) on specific computers (not in an OU)

This has been bugging me for a while. Here's the setup: We have ~20 Win2k8r2 servers. They are separated into various OUs that I can't change. I have created a security group "DevHostsSG" that ...
-2
votes
1answer
2k views

Target object for this command has incorrect format

I'm doing some 70-410 training and this script that I'm trying to run that I made keeps on failing due to an error that I receive that I stated in the topic. doesanyone see anything wrong in this: ...
0
votes
0answers
843 views

Using DSCONFIGAD to bind computer objects to a specific OU using a FQ LDAP DN

The DSCONFIGAD utility for OS X has a -OU parameter that allows one to generate and bind computer objects to a specified -OU via a FQ LDAP DN argument. This is taken directly from Apple's DSCONFIGAD ...
0
votes
1answer
644 views

WSUS: organize computers

in my 2012R2 domain I need to organize efficiently clients and servers in WSUS. Who setup the domain created one group for each location, and each one is divided into operating systems: Location 1 ---...
1
vote
1answer
248 views

How to make Group Policy to the same User Group at different Computer Groups? (VDI)

I made two Organizational Unit in my domain Thin Clients (there are the physical computer objects) Virtual Clients (there are the virtual computer objects) And I have the default Users (there are ...
5
votes
2answers
6k views

How can I create Organizational Units recursively on Powershell?

I'm writing a Powershell script to populate all the company users to a Active Directory from a CSV file. The script uses the Powershell command New-ADUser and it should know, for every user, where is ...
3
votes
3answers
21k views

PowerShell - finding users who are Inactive AND not disabled

I wrote this cmdlet: Search-ADAccount -filter {(enabled -eq $true)} -Users Only -SearchBase "ou=FirstOU,dc=domain,dc=com" -AccountInactive -TimeSpan 30 But it outputs an error: Search-ADAccount : A ...
5
votes
1answer
14k views

PowerShell - Finding all of users' group memberships and kicking it out of them

as title says, I have to find all the groups that the user is a member of, and deleting its membership from all of them. I've tried this: get-adgroup -filter * | where {(Get-ADGroupMember $_ | ...
5
votes
3answers
56k views

PowerShell - Limit the search to only one OU

Ive got this cmdlet and I'd like to limit the results to only one OU: Get-ADUser -Filter {(Enabled -eq $false)} | ? { ($_.distinguishedname -notlike '*Disabled Users*') } Now Ive tried to use -...
3
votes
3answers
9k views

PowerShell script that should find disabled users that are not in a specific OU outputs users from that OU as well

Hey I've got this cmdlet here: Get-ADUser -filter {(distinguishedName -notlike "Disabled Users") -and (enabled -eq $false)} -searchBase "ou=FirstOU,dc=domain,dc=com" I've built it to find disabled ...
0
votes
2answers
5k views

Powershell - check if all users in a specific OU are disabled, disable if not

I tried to search for it but I didn't find anything. Could someone help me out with an example of a script that would do this?
2
votes
2answers
4k views

Mapped Drive by OU

I want to implement a mapped drive which is hidden/exposed based on the OU of the user. I have a working version of this in one environment (Windows 2008R2; created by someone else), and I am trying ...
2
votes
1answer
195 views

Structuring an OU to properly model an Organizational Hierarchy

I'm experimenting with using OUs in my network's Active Directory and group policy. However, I'm having a little trouble figuring out the right way to structure my OUs so that I can have individual ...
3
votes
1answer
2k views

Applying a group policy at the domain level and scoping vs. applying at the OU level

The way I see it, if I have a GPO and want to apply it, 2 options I have are: Linking the GPO to the domain and then scoping to security groups and maybe users Linking the GPO to an OU that contains ...
0
votes
1answer
224 views

Powershell - query non-standard group members in an OU?

I am looking to create a script which will only show users in an OU who are members of "non-standard" groups. For example, all users in the "Accounting" OU will be members of at least one group with "...
1
vote
1answer
201 views

Complex Group Policy Inheritance

I'm currently trying to design the OU and Group design for a new AD deployment. Firstly, taxonomy is hard. As a first guess attempt, we're trying to keep all User objects together in OU=Users, and ...
1
vote
1answer
1k views

assign an OU to a certain RODC

I have a RWDC(A) and two RODC(B and C).i create an OU for each branch in RWDC however the OU and it's content will be replicated to all DCs within the domain. So I want to know can we assign an OU to ...
3
votes
1answer
3k views

Cant find “Read Lockout Time” and “Write Lockout Time” for delegation on OU

Trying to delegate permissions to a group on a OU; but cant find 2 properties in special permissions for "User Objects" they are "Read Lockout Time" and "Write Lockout Time" any reason i couldnt see ...
2
votes
1answer
3k views

Difference between “Descendant User Objects” and just “User Objects”

i am trying to delegate permissions on a cetain OU to a certain group. All i find is "Descendatn User Objects" and not just "User Objects" ; we have those available in other domain; please do let me ...