Decision Summary

The OU structure needs to be defined for each domain in the design. At the end of this decision, the OU design should have identified the following:

  • OUs to be created, based on one of two design criteria: delegation of administration or Group Policy application.

  • Which objects need to be located in each OU.

  • Administration (Delegation) groups to be created and mapped to OUs.

  • Object rights to be granted to each group in each OU.

  • Which GPOs need to be created and to which OUs they should be linked.

Get Windows Server 2008 Active Directory Domain Services now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.