The consultant may have been referring to the number of GPOs that you are
attaching to the OUs. The more GPOs that have to be processed, the longer the
login time.
OU design is really a matter or preferences, IMO.
Sincerely,
_
(, / | /)
The OU
structure and depth does not directly influence logon time (AD hierarchy is in
fact something of a simulation). Hierarchy can influence login performance
only when nested sufficiently deeply and with a large number of linked GPOs at
each or most of the superior OUs, a choice made by
Your consultant is smoking something. OU depth has nothing to do
with logon time (although I have seen recommendations to keep it like under 5
or 7 depth as a matter of design practice). The number of group policies the
client has to process will of course affect logon time (and if you have
Milton,
The OU structure you are using is fine and it is a fairly common. You are using a function-based design that makes it easier for you to administer your domain.
OU's are created for basically two reasons. The first is for group policies and the second is for delegation of administratio
That is incorrect. I have chased this code path a couple of
times in the Windows source and from other obvious logical reasons the hierarchy
will not impact auth timings - read the book in the signature for more info on
that as I specifically call this fallacy out.
The issue is with the NU
Joe,
The problem is that, as some
one else mentioned your OU structure serveves two purposes:-
1) To delegate
authourity
2) To apply rights and restrictions
via GPO's
Now if you are going to delegate
authourity, as far as I can see, the only way to do that is via OU's. You could
apply
verfaq.org Profile: http://mvp.support.microsoft.com/profile="">
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave
WadeSent: Thursday, April 13, 2006 9:22 AMTo:
ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] OU's
Structure
Joe
t;>
From: [EMAIL PROTECTED] [mailto:
[EMAIL PROTECTED]] On Behalf Of Dave WadeSent: Thursday, April 13, 2006 9:22 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] OU's Structure
Joe,
The problem is that, as some one else mentioned your OU structure serveves two purpo
m: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave
WadeSent: Thursday, April 13, 2006 3:22 AMTo:
ActiveDir@mail.activedir.orgSubject: Re: [ActiveDir] OU's
Structure
Joe,
The problem is that, as some
one else mentioned your OU structure serveves two purposes:-
1) To delegate
auth
