Active Directory Structure

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

A quick question

Do domain controllers accounts have to be located in the domain controllers
OU. will moving the accounts to another OU cause any faults.

Thanks
 
Do you mean the acounts of users who are members of the Domain Admins group?
The answer to that is no. However if have created any specific policies for
these accounts they need to be in the same OU as the one the policy is
linked to.
Anthony
 
They don't have to be but it is recommended that you do not. You can also
create a child OU or OU's to the domain controller container if you want to
configure an additional GPO through that OU's GPO. Keep in mind that in the
domain controllers OU, that almost all user rights are configured in Domain
Controller Security Policy. --- Steve
 
Back
Top