Help with ou structure please

[welshboy]

I've been tasked into cleaning up our ou, were currently migrating to a new environment. so far ive got it planned like this

companyname.com
-Contractors (for visitors and contractors)
- Sites (then split to london, manchester, leeds, liverpool, ireland, india)
then under each one got
local users
local computers
shop floor computers (different policy)
local servers

then ive got:

- members servers
- domain controllers
- domain administration (Domain admins etc)

now remote users/laptops should i put these under sites, or seperate at top level. how do you have it?

cheers

Paul

 

[ChrisD.]

I presume you you mean local users as in users local to the location, or do you mean local to the Domain? Be careful with your terminology as it could get confusing.

 

[Uhtred]

I would use 'Kiosk' machines instead of 'shop floor' and as above, avoid the use of the word local. We have 'Users and Groups' and then have a sub OU for security groups, there is also a spot for distribution lists and contacts etc

 

[welshboy]

cheers. weve got a external solution for email/dist groups/public folders.

ive changed the "local" bits to just "computers", "users" etc.

Im still unsure what to do with the remote users that travel between sites. should this be seperate do you think? cheers

 

[Muffin`]

Only you can really answer that of how you run GPO/SCCM/WSUS for those laptops

e.g.:

Company.local

-Bristol
--Laptops
--Users
--Workstations

-London
--Laptops
--Users
--Workstations

-Remote
--Laptops
--Users
--Workstations


So i can easily apply a Computer based policy to the Site and it will grab Workstations and Laptops but can fall down if you have Servers included in the site OU and don't keep ontop of the security. The remote users for example have their Windows Update pointing at the MS servers comped to sites who look at the local servers