Re: OU Delegation
From: Herb Martin (news_at_LearnQuick.com)
Date: 12/18/04
- Next message: Herb Martin: "Re: kerberos"
- Previous message: Herb Martin: "Re: Temporarily allow login during restricted hours"
- In reply to: Fred Yarbrough: "Re: OU Delegation"
- Next in thread: Herb Martin: "Re: OU Delegation"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 17 Dec 2004 17:36:36 -0600
"Fred Yarbrough" <fcyarbrough@yahoo.com> wrote in message
news:uwWxAZI5EHA.1204@TK2MSFTNGP10.phx.gbl...
> Ok. I sorta get that feeling. How is the best way to allow a user to be
> the Administraor for a remote site? Is the fact that I am wanting to all
> them access to login to the DC the issue here?
>
And it really has little or nothing to the problem you
are actually trying to solve. (Really.)
If you MUST organize DCs by location (or other criteria)
I strongly suggest those OUs be child OUs of the default
DC OU.
I have no real reason why doing otherwise gets so screwy
but I assure you I have tried it with terrible but not in your
face results -- it works well enough you forget about it
but you domain gets flaky.
Others have confirmed this behavior and there may even be
a KB article on it.
It also may have been fixed in some Service Pack but most
of use stopped trying this long ago.
I do have child OUs in the DC OU and they seem ok.
- Next message: Herb Martin: "Re: kerberos"
- Previous message: Herb Martin: "Re: Temporarily allow login during restricted hours"
- In reply to: Fred Yarbrough: "Re: OU Delegation"
- Next in thread: Herb Martin: "Re: OU Delegation"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|