Creating An Ou Architecture

By Author: Jasmine
Total Articles: 286
Comment this article

Each domain can implement its own Windows 7 certificate hierarchy. If your enterprise contains several domains, you can create OU structures within each domain, independent of the structures in the other domains. This lesson walks you through the steps for creating an OU structure.
Creating OUs
Use the Active Directory Users And Computers console to create OUs. To create OUs, complete the following steps:
1.Click Start, point to Administrative Tools, and then click Active Directory Users And Computers.
2.Right-click the location where you want to create this OU, which can be either a domain or another OU, point to New, and then click Organizational Unit.
3. In the New Object-Organizational Unit dialog box, shown in Figure 6-5, type the name of the new OU in the Name box, and then click OK.
You can also use scripts to create, delete, and manage OUs. You can
review some sample scripts for doing so on the Supplemental CD-ROM in the \70-294\Labs\ ChapterOG folder. The CreateLabsOU.vbs script will create an OU named Labs in the con-toso.com domain. ...
... The ViewDCMembers.vbs script lists the members of the Domain Controllers OU. Members of that OU are the Serverl and Server2 computer accounts. The DeleteLabsOU.vbs script removes the Labs 70-686 exam from the contoso.com domain. To view the contents of any script, right-click the script and then click Edit.
A global catalog server is a domain controller that stores a full copy of all objects in the directory for its host domain and a partial copy of all objects for all other domains in the forest. For optimum network response time and application avail-ability, designate at least one domain controller in each site as the global catalog server. To optimize replication in a multiple site environment, you might need to consider adding global catalogs for specific sites.
Universal group membership caching allows a site that does not contain a global catalog server to be configured to cache universal group memberships for users who log on to the domain controller in the site. Use the universal group member-ship caching feature to eliminate the need to deploy global catalog servers into smaller remote office locations in order to avoid logon failures in the event that the network link connecting the remote site to the rest of the organization is dis-connected.
An application directory partition is a directory partition that is replicated only to specific domain controllers running Windows Server 2003. Use the Ntdsutil com?mand-line tool to create or delete an application directory partition, add or remove an application directory partition replica, display application directory partition information, set a notification delay, prepare a cross-reference object, or set an
free practice tests application directory partition reference domain.