OUCC2004

Windows Active Directory

Suggested topics for discussion

Active Directory Design

• Does the corporate hierarchy design for Organizational Units work in the Academic world?

• How are others implementing AD?• How to handle users that report to multiple departments/faculties?• Single domain design verses multiple layered approach (child domains).

Active Directory Management

• How to delegate Administration of AD?• How are accounts created/updated/deleted?• What 3rd party tools are in use for GPO management, auditing, etc.?• How to apply GPOs via group membership?• How to handle roaming profiles?

UWO'sWINDOWS 2000 TREE

UWO.CA

jstaff@uwo.cajstudent@uwo.ca

advancecluster server

EDU.UWO.CA SSC.UWO.CA UMS.UWO.CA

CHILD DOMAINS

DC2.UWO.CA DC1.UWO.CA

Member server Member server

SAN

Member servers

DC1.EDU.UWO.CA DC2.EDU.UWO.CA DC1.SSC.UWO.CA DC2.SSC.UWO.CA

EXTERNAL.UWO.CA

DC1.EXTERNAL.UWO.CA DC1.UMS.UWO.CA

. . .

Current AD design

UWO

cluster

Acad

Law-admin

Law

Chem

users

Computers

Asmith

Jdoe

Rbrown

TblackXP 2000

pc1

pc2

pc3

pc4

pc5

Admin

Finance PPD HR

Force updateGPO

science

......

DomainContollers

Users

Target AD design

UWO

Administration

martin

nwellard puraab

ken

roserdtebby

Comp 01

Comp 04

Comp 03Comp 02

Server 01

Server 02

DC1 DC2 GenLabsLaw Registrar ITSFIMS

Law admin

Gl-c-sh1325

Genlabs-admin

ITS-admin

FIMSadmin

Registraradmin

Gl-u-confserv

Gl-c-nsc110

Gl-c-uc2

PCsPeopleDomain

Controllers

MSUpdate

user2 GroupPolicy

FIMS-mit2024

Forceupdate

gpo

People OU contains all faculty, staffand students

group5

Law GPO FIMS GPO

FIMS lab

Genlab nsc

Discussion