Upgraded NT4 domain Query

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Hi, I am upgrading my old Domains to WIndows 2000 Domain.
After the upgrade all Users go to a Default built in ( no name changeable
container) and Computers go to the Computers Container.)
If i create OU's and move these users to the OU's, whether the Default Group
Policies will also be good after the move.
( i have not created any new policies after the upgrade, everything is
coming from default).

Sin

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

"Sin Joe" <SinJoe@discussions.microsoft.com> wrote in message
news:EB3DC174-BA8B-46FA-B7E1-D5B834DDF7FD@microsoft.com...
> Hi, I am upgrading my old Domains to WIndows 2000 Domain.
> After the upgrade all Users go to a Default built in ( no name changeable
> container) and Computers go to the Computers Container.)

Yes, these are equivalent to being at the top level of the
domain -- but they just didn't want to clutter up the actual
domain that way.

> If i create OU's and move these users to the OU's, whether the Default
Group
> Policies will also be good after the move.

Yes, because GPOs are inherited by child OUs.

Site->Domain->OU->childOU->grandchildOU etc.

> ( i have not created any new policies after the upgrade, everything is
> coming from default).

Just don't move the DCs out of the DC OUs. It's
some sort of bug-feature that they MUST be in there.

I have even had poor results with DC->childDC OUs.

(Once I tried to ORGANIZE my DCs.)

--
Herb Martin


>
> Sin

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

Hi Herb,
Thanks a bunch for clarifying this.
However i am still not clear on one point--- about moving the user accounts
to another OU, if i move them to another OU whether the default domain policy
will still be with them?
( i know in other fresh install situation this would be the case, but in an
upgrade scenario is there any change)

Sin
"Herb Martin" wrote:

> "Sin Joe" <SinJoe@discussions.microsoft.com> wrote in message
> news:EB3DC174-BA8B-46FA-B7E1-D5B834DDF7FD@microsoft.com...
> > Hi, I am upgrading my old Domains to WIndows 2000 Domain.
> > After the upgrade all Users go to a Default built in ( no name changeable
> > container) and Computers go to the Computers Container.)
>
> Yes, these are equivalent to being at the top level of the
> domain -- but they just didn't want to clutter up the actual
> domain that way.
>
> > If i create OU's and move these users to the OU's, whether the Default
> Group
> > Policies will also be good after the move.
>
> Yes, because GPOs are inherited by child OUs.
>
> Site->Domain->OU->childOU->grandchildOU etc.
>
> > ( i have not created any new policies after the upgrade, everything is
> > coming from default).
>
> Just don't move the DCs out of the DC OUs. It's
> some sort of bug-feature that they MUST be in there.
>
> I have even had poor results with DC->childDC OUs.
>
> (Once I tried to ORGANIZE my DCs.)
>
> --
> Herb Martin
>
>
> >
> > Sin
>
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.active_directory (More info?)

"Sin Joe" <SinJoe@discussions.microsoft.com> wrote in message
news32093B1-EBBE-4E4E-804C-8BDE6854034E@microsoft.com...
> Hi Herb,
> Thanks a bunch for clarifying this.
> However i am still not clear on one point--- about moving the user
accounts
> to another OU, if i move them to another OU whether the default domain
policy
> will still be with them?

Yes, because ALL computer and all OUs of computers
inherit from the Domain down.

Since the Default Domain policy is linked to the domain,
machine in the domain, no matter what OU get that policy,
unless you explicitly block inheritance.

> ( i know in other fresh install situation this would be the case, but in
an
> upgrade scenario is there any change)

There is no difference

--
Herb Martin


>
> Sin
> "Herb Martin" wrote:
>
> > "Sin Joe" <SinJoe@discussions.microsoft.com> wrote in message
> > news:EB3DC174-BA8B-46FA-B7E1-D5B834DDF7FD@microsoft.com...
> > > Hi, I am upgrading my old Domains to WIndows 2000 Domain.
> > > After the upgrade all Users go to a Default built in ( no name
changeable
> > > container) and Computers go to the Computers Container.)
> >
> > Yes, these are equivalent to being at the top level of the
> > domain -- but they just didn't want to clutter up the actual
> > domain that way.
> >
> > > If i create OU's and move these users to the OU's, whether the Default
> > Group
> > > Policies will also be good after the move.
> >
> > Yes, because GPOs are inherited by child OUs.
> >
> > Site->Domain->OU->childOU->grandchildOU etc.
> >
> > > ( i have not created any new policies after the upgrade, everything is
> > > coming from default).
> >
> > Just don't move the DCs out of the DC OUs. It's
> > some sort of bug-feature that they MUST be in there.
> >
> > I have even had poor results with DC->childDC OUs.
> >
> > (Once I tried to ORGANIZE my DCs.)
> >
> > --
> > Herb Martin
> >
> >
> > >
> > > Sin
> >
> >
> >