Questions tagged [organizational-unit]
A unit of organization in Windows Server that organizes Users, Computers, and Printers.
78
questions
7
votes
3
answers
85k
views
PowerShell - Limit the search to only one OU
Ive got this cmdlet and I'd like to limit the results to only one OU:
Get-ADUser -Filter {(Enabled -eq $false)} | ? { ($_.distinguishedname -notlike '*Disabled Users*') }
Now Ive tried to use
-...
- 320
3
votes
3
answers
11k
views
PowerShell script that should find disabled users that are not in a specific OU outputs users from that OU as well
Hey I've got this cmdlet here:
Get-ADUser -filter {(distinguishedName -notlike "Disabled Users") -and (enabled -eq $false)} -searchBase "ou=FirstOU,dc=domain,dc=com"
I've built it to find disabled ...
- 320
0
votes
2
answers
7k
views
Powershell - check if all users in a specific OU are disabled, disable if not
I tried to search for it but I didn't find anything. Could someone help me out with an example of a script that would do this?
- 320
2
votes
2
answers
5k
views
Mapped Drive by OU
I want to implement a mapped drive which is hidden/exposed based on the OU of the user. I have a working version of this in one environment (Windows 2008R2; created by someone else), and I am trying ...
- 319
2
votes
1
answer
337
views
Structuring an OU to properly model an Organizational Hierarchy
I'm experimenting with using OUs in my network's Active Directory and group policy. However, I'm having a little trouble figuring out the right way to structure my OUs so that I can have individual ...
- 555
3
votes
1
answer
2k
views
Applying a group policy at the domain level and scoping vs. applying at the OU level
The way I see it, if I have a GPO and want to apply it, 2 options I have are:
Linking the GPO to the domain and then scoping to security groups and maybe users
Linking the GPO to an OU that contains ...
- 41
0
votes
1
answer
402
views
Powershell - query non-standard group members in an OU?
I am looking to create a script which will only show users in an OU who are members of "non-standard" groups.
For example, all users in the "Accounting" OU will be members of at least one group with "...
1
vote
1
answer
218
views
Complex Group Policy Inheritance
I'm currently trying to design the OU and Group design for a new AD deployment. Firstly, taxonomy is hard. As a first guess attempt, we're trying to keep all User objects together in OU=Users, and ...
- 27.6k
1
vote
1
answer
2k
views
assign an OU to a certain RODC
I have a RWDC(A) and two RODC(B and C).i create an OU for each branch in RWDC however the OU and its content will be replicated to all DCs within the domain.
So I want to know can we assign an OU to a ...
- 145
3
votes
1
answer
6k
views
Cant find "Read Lockout Time" and "Write Lockout Time" for delegation on OU
Trying to delegate permissions to a group on a OU; but cant find 2 properties in special permissions for "User Objects" they are "Read Lockout Time" and "Write Lockout Time" any reason i couldnt see ...
- 837
2
votes
1
answer
8k
views
Difference between "Descendant User Objects" and just "User Objects"
i am trying to delegate permissions on a cetain OU to a certain group. All i find is "Descendatn User Objects" and not just "User Objects" ; we have those available in other domain; please do let me ...
- 837
7
votes
2
answers
5k
views
In LDAP is it best to nest groups under organizational units or create an organization unit directly under the root dn just for groups?
I'm not sure whether it's better to nest groups under each of my organizational units or to make an organization unit directly under the root DN just for groups. Is one considered best practice over ...
- 496
1
vote
2
answers
5k
views
Can I move these items around in active directory
I am just reorganising my companies active directory structure, as it hasn't kept up with changes in the company structure.
There are a few items I am not sure if I can move or not. Can anyone tell ...
- 1,753
1
vote
1
answer
776
views
Ldap query on single subOU for Alfresco
this is what my ldap looks like :
red.lan
Groups(OU)
Computers(SubOU)
Printers(SubOU)
Users(SubOU)
Some(OU)
Users(OU)
SomeOther(SubOU)
So, i'm ...
- 63
1
vote
1
answer
1k
views
GPO defining a user policy is being applied, despite being linked to a computer OU (without loopback processing)
I must be missing something obvious here.
We have a GPO linked to a computer OU.
The GPO runs a VB logon script (a user policy) when users log on.
I was just about to enable loopback processing on ...
- 1,180
8
votes
4
answers
10k
views
GPO not applying to an OU
We have a batch file (logon.bat) that maps drives whenever a user logs on.
This script is applied by Group Policy to the entire domain.
Initially, this worked perfectly, as we always wanted this ...
- 1,180
1
vote
1
answer
889
views
Restricting particular OUs from accessing Active Directory folder
I know how to restrict individual users from accessing/reading OUs or folders in Active Directory.
This page provides a good guide on how to do this.
But how can one bar the users of an entire OU, ...
- 113
6
votes
1
answer
7k
views
Join VM to specific Active Directory OU using System Center VMM 2012 Guest OS Profile
We use System Center 2012 Virtual Machine Manager to deploy VMs to our Hyper-V servers. We are starting to use the VM and Service templates to automate our system deployments, but one step we need to ...
- 5,670
1
vote
2
answers
3k
views
Putting a shortcut on the desktop of all the people in a particular OU?
At work we have all the user desktops redirected to a server.
Within a all the users in an OU I need to put the same shortcut on all of their desktops. Is there an easier way to do this than just ...
- 4,919
0
votes
1
answer
117
views
Tips on organizing Active Directory for a global company with different departments [closed]
I have started to read and implement some of the basic domain architecture implementation, one of the question I have is what is the latest trend in organizing the active directory OU's, Groups and ...
- 101
1
vote
0
answers
37
views
How to give Admins Access to move users to a Single OU [duplicate]
We are delegating few acceses to some admins via taskpads;
So we created a OU called "Delete" and we want the admins to move all the users to be deleted to that OU; How can we do that , how can we ...
- 837
1
vote
1
answer
476
views
Can users added to certain OU automatically be member of particular group
Windows Server 2008 R2.
Can AD be set up so that any user added to a particular OU automatically be assigned to a particular user group?
- 277
1
vote
2
answers
5k
views
Set Organizational Unit by IP Address in Active Directory
Our AD is a mess, and I've been trying to look for a way to automatically assign computers/workstations to an Organizational Unit based on their IP address. I've had no luck, though, in finding any ...
- 1,389
4
votes
1
answer
563
views
Server 2008: Link security group to organisational unit
I've created a test domain with 2 VM's to experiment and try to gain some knowledge using Server 2008 (+GPO's, OU's, ADUC etc) however I've become a little stuck.
I've created an OU called User ...
- 181
5
votes
2
answers
13k
views
Do I need child domains in AD?
I have a an organization having HQ(about 150 users) in one city and 16 branches (high schools, 300-400 users each) each in different city.
What I have to do is create a domain(s) in AD for corporate ...
- 263
6
votes
3
answers
61k
views
How do you override a GPO with another GPO?
If there is a GPO which is applied to all Domain Computers which disables something, is there a way to re-enable the disabled thing for some hosts in the domain, without taking those hosts out of the ...
- 878
1
vote
2
answers
1k
views
Cannot change default OU for new Distribution Groups in Exchange 2010
I'm trying to use the following command to set the default OU for new distribution groups in Exchange 2010:
Set-OrganizationConfig -DistributioNGroupDefaultOU 'corp.company.com/Employees/MailingList' ...
- 3,250
2
votes
3
answers
3k
views
GPO - Restricted Groups applying, but don't actually add the group
The following scenario is weird. Please be advised.
I have created a GPO on an OU containing workstations like this:
This GPO purpose is to make the Backup Operators group a member of the local ...
- 1,958