Devon- To a certain extent is varies based on your business requirements. There are basic things though: Computers Users Groups Contacts. My standard for OUs is something like this CookieCutter Division --Computes ----Workstations ----Laptops ----Servers --Users ----Employees ----Contractors ----Temporary --Groups --Contacts I let people create OUs under the bottom most OU in each subtree and do whatever to the relevant objects. I provision users centrally so I don't delegate exchange. It's way easier to have some sort of central exchange provisioningysstem or site rather than trying to delegate it. I have a sript I wrote that creates the OU structure, groups, and delegates various rights, you're welcome to a copy if you want it. You'll have to modify it for your organization, but, it's a good start. Thanks, Brian Desmond [EMAIL PROTECTED] c - 312.731.3132
________________________________ From: [EMAIL PROTECTED] on behalf of Harding, Devon Sent: Wed 1/11/2006 4:24 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] OU Delegation We're in the process of consolidating 21 child domains into just one and one root. We want to separate the divisions (domains) into different OUs. Is there a guide or best practice out there on delegating admin permissions on OUs? Also, we've got Exchange permissions to deal with too. Devon Harding Windows Systems Engineer Southern Wine & Spirits - BSG 954-602-2469 ________________________________ __________________________________ This message and any attachments are solely for the intended recipient and may contain confidential or privileged information. If you are not the intended recipient, any disclosure, copying, use or distribution of the information included in the message and any attachments is prohibited. If you have received this communication in error, please notify us by reply e-mail and immediately and permanently delete this message and any attachments. Thank You.
<<winmail.dat>>
