OU question ??-

  • Thread starter Thread starter Misaro
  • Start date Start date
M

Misaro

(Active Directory Domain)
Hi,
I created a OU called Accounting !!

Is possible to do the OU administratively independent
from others OU's

fOR EXAMPLE : Computers,Users, shares etc available only
on that structure (OU) Nobody else access this OU without
explicity access.

Thanks any help !!
 
I created a OU called Accounting !!

Is possible to do the OU administratively independent
from others OU's

fOR EXAMPLE : Computers,Users, shares etc available only
on that structure (OU) Nobody else access this OU without
explicity access.
Click to expand...

No. Access to shares, computers is coupled to the SID not the UID.
Take a look into Explorer and open the security tab for a
directory/file. You will be able to add users and groups. Nothing
about OUs.
Take a look into the security settings (control -> administration).
You will find the priviledges (log on locally, ...) are linked to
users and groups. Nothing about OUs here, too.

And an admin will always be able to override any security restrictions
once established.

Ciao, Walter

PS: Novell NetWare is able to do what you want. If you want to do
something similiar in AD you have to create another domain.
 
Well sort of...

You can hide computers and users and shared folder objects within the OU and make it so only certain people can see/use
them. However if they know the computer name or can browse for it via the browse service then they can find the
computers and they can find the shares on the computers though they won't be able to connect to the share unless you
have set them up with permissions.
 
Back
Top