OU and Group Design

Understanding the concepts used with Windows Server 2012 design is only part of the battle. The application of those concepts into a best-practice design is the tricky part. You can take heart in the fact that of all the design elements in AD DS, OU and group structure is the most flexible and forgiving. Although care should be taken when moving objects between OUs that have group policies enabled, the operation is not visible to end users and has no effect. That said, care should be taken to ensure that group policies that might be in place on OUs are moved in before user or computer accounts move. Not taking this into account can lead to the application of unwanted group policies to various computer or user objects, often ...

Get Windows Server® 2012 Unleashed now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.