locked
User Group and OU RRS feed

  • Question

  • Dear all,

    I have a few questions.

    Should I put user groups in OU or just users?

    It is unclear to me how on should use OU and AD toghether for applying GP.

    Lets say I want all users in the Finance dept. have access to certain folders and map them. Should I then create an OU "Finance" and in it create a user group "Finance" that has full access to the intended folder and then add GP to the OU that maps a letter to the intended folder? Or should I add each user of the Finance dept. to the OU finance?

    What is better, should the AD or he OU be the main structure of the departments?

    Any thoughts welcome.

    Best,

    Jon

    Tuesday, February 3, 2015 9:00 PM

All replies

  • You are on the right track.

    Create an OU when you need to assign a policy and possibly delegate management of AD objects.  Use groups to manage security. 

    So in this case Create an OU and put the Finance users in that OU.  Create a GPO that assigns them the mapped drive.    Also create a security group that has all the finance users in it as well.  Give the group access to the share you assigned in the GPO.

    The Group does not have to be in the Finance OU though... but often makes sense to put it there.

    Thursday, February 5, 2015 4:39 PM