Setting up a decent AD structure(or the best)

Home Forums Microsoft Networking and Management Services Active Directory Setting up a decent AD structure(or the best)

This topic contains 4 replies, has 5 voices, and was last updated by Avatar Ramjet_99 12 years, 4 months ago.

Viewing 5 posts - 1 through 5 (of 5 total)
  • Author
    Posts
  • Avatar
    Silver23
    Member
    #125935

    I had a really interesting discussion with another IT admin about how to set up AD.

    Now this question has probably been asked before, and i doubt there is only one answer but here it goes.

    What is the best structure for an AD domain?

    Do you structure by department or by technical details or location?
    The admin I had this discussion with also had all users in one OU, I consider this a bad practice, but maybe you dont, and I would like to hear why.

    He said to me that it doesnt really matter where this person is, and tht AD is just a tool and so on, but I think it is much more efficient to nest OU’s in a logical structure.

    Microsoft has some nice best practices ideas about this, but I think that there must be a way to fit all kinds of organizations

    Also having more groups than users seems like a bad idea, or at least it sounds that way but it could/should be possible to make it more efficient.

    In advance thx for all responses and insights

    Avatar
    m80arm
    Member
    #233013

    Re: Setting up a decent AD structure(or the best)

    I personally organise my AD based on ease of administration. The more complex your AD structure the harder it is to keep on top of it with GPO’s, delegated permissions etc.

    I suppose it’s down to each company’s requirements but why make things harder for yourself.

    Michael

    Avatar
    Ramjet_99
    Member
    #277215

    Re: Setting up a decent AD structure(or the best)

    Something I use on a nationally ditributed site – put users into location based OUs and workstations into a single OU (assuming same base software company wide)

    Further application of policy can then be by role based security groups.

    #219591

    Re: Setting up a decent AD structure(or the best)

    There’s no one “best way”. It depends entirely on business, physical and technical requirements in each individual case.

    Avatar
    jasonboche
    Member
    #262719

    Re: Setting up a decent AD structure(or the best)

    There are entire books and at least two Microsoft exams that are dedicated to this topic. It’s a fairly loaded question. As the previous poster said, there is no one size fits all solution. AD is usually tailored to fit each organization.

Viewing 5 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic.