Archived from groups: microsoft.public.win2000.group_policy (
More info?)
Actually, if you use an unattended installation to deploy WIN2000 or WIN XP
you can specify the location of the computer account by stipulating the
"MachineObjectOU" line under the [Identification] section. It would look
something like this:
MachineObjectOU="OU=WIN2000,OU=WORKSTATIONS,DC=MyCompany,DC=com" -OR-
MachineObjectOU="OU=WINXP,OU=WORKSTATIONS,DC=MyCompany,DC=com"
Granted, you would have to have created the OU structure before hand!
This does not work with RIS, IIRC. It is solely an unattended installation
thing.
Furthermore, there is a utility that is available in WIN2003 environments
that will change the default location of computer account objects as well as
the default location of user account objects. Please take a look at the
following MSKB Article:
http://support.microsoft.com/?id=324949
HTH,
Cary
"Gautam Anand" <gautam@hotpop.com> wrote in message
news:eDlcg2tqEHA.1712@tk2msftngp13.phx.gbl...
> I don't believe a move to an OU could be automated when a machine
> joins the domain.
> Yes by default its put in the Computers container. And users in the
> users container. I suspect someone might have figured out to do this
> via a script but I have yet to see that.
>
> You could probably put that one up in the Microsoft Wishlist if you
> don't get an answer here or on the net.
>
> --
> Gautam Anand
> e: gautam at hotpop dot com
> ---------------------------------
> "Fat Bastard" <fbastard@satan.com> wrote in message
> news:ct04m09q8qkusmjbhfnoghea7p08134lf6@4ax.com...
> | Thank you for the tip. That explains why the problem I have isn't
> | more common.
> |
> | So I am guessing that when a computer is added to the domain it is
> | added to the default container and then I would need to manually
> move
> | it to the separate OU. If this is true could the manual move to the
> | OU be automated?
> |
> | Thanks again for the tip. I will give it a try.
> |
> | On Mon, 4 Oct 2004 23:12:25 +0530, "Gautam Anand"
> <gautam@hotpop.com>
> | wrote:
> |
> | >Hi,
> | >
> | >Actually you would want to have the client workstations in a
> separate
> | >OU. You could bunch them up in a new OU like Bruce mentioned. Thats
> | >the way most of the organizations setup their AD structure.
> | >
> | >users in a separate OU.
> | >
> | >Keeping these machine and User accounts in their default containers
> | >doesnt help help you achieve anything. By moving them to a OU, you
> can
> | >apply GPOs to them exculsively like you want here.
> | >
> | >You can delegate control of these ous or part managing these ous.
> | >
> | >I would really not put a Software Installation Policy at the top of
> my
> | >Domain. I dont want that policy to hit my DCs, my Servers or some
> of
> | >my workstations. Just hit the Computers I want it to.
> |
>
>