[gptalk] Re: AD Consolidation

  • From: "Darren Mar-Elia" <darren@xxxxxxxxxx>
  • To: <gptalk@xxxxxxxxxxxxx>
  • Date: Tue, 8 Jan 2008 13:47:20 -0800

Dave-

Since this is probably more of an AD issue than a Group Policy issue (which
this list is focused on) I might suggest you post this on the activedir.org
mailing list as well, as you are likely to get some responses from folks who
have done a lot of this kind of migration. However, I think the bottom-line
is the answer will be driven by the OU administrators' business needs. If
they need to be able to create users and computers, create and link GPOs,
create groups, etc. then you will likely have to make those OUs wide-open
for them. But again, it depends upon what responsibilities they have,
keeping in mind that access to domain controllers directly will be pretty
limited for them.


Darren

 

From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On
Behalf Of Daniel Gomes
Sent: Tuesday, January 08, 2008 1:38 PM
To: gptalk@xxxxxxxxxxxxx
Subject: [gptalk] AD Consolidation

 

Hello all,

 

We are at the beginning stages of doing an AD Consolidation. We are looking
at consolidating two domains into one having one of the domains become an OU
in the other. My question is if anyone has done this before what would you
recommend as the best way about assigning rights to the OU of the domain to
allow its old administrators to still manage the OU and its Sub OUs?

 

Dave

Other related posts: