move AD objects to specified OU automatically through AD

[april]

Is there any way that I can move computer object and user object to
specified OUs from AD default containers (computers OU or users
OU)through group policy ?

Thank you very much!

[Florian Frommherz [MVP]]

April,

Post by april
Is there any way that I can move computer object and user object to
specified OUs from AD default containers (computers OU or users
OU)through group policy ?

Group Policy can't do that. Group Policy only forces settings on the
client's Operating System (Windows) not on its AD objects or AD itself.

If you're in a domain with Server 2003 domain functional level, have a
look at the two command line tools "redircmp" and "redirusr". They
redirect newly created users and machines to OUs you specify.

cheers,

Florian

[april]

Post by Florian Frommherz [MVP]
April,

Post by april
Is there any way that I can move computer object and user object to
specified OUs from AD default containers (computers OU or users
OU)through group policy ?

Group Policy can't do that. Group Policy only forces settings on the
client's Operating System (Windows) not on its AD objects or AD itself.
If you're in a domain with Server 2003 domain functional level, have a
look at the two command line tools "redircmp" and "redirusr". They
redirect newly created users and machines to OUs you specify.
cheers,
Florian

Thank you so much for your response.

Can you advise how I can automate this process every time there is a new
user or computer to be created by using these two command line tools?

We are in a Windows 2003 domain functional level. And also I have
separated OUs for admin users and admins' computers and regular users
and their computers.

Thank you again.

[JPolicelli [MVP-DS]]

Redirect users:
redirusr OU=Users,OU=Toronto,DC=domain,DC=com
Replace "OU=Users,OU=Toronto,DC=domain,DC=com" with the distinguished name
of the OU you want them to end up in.

Redirect computers:
redircmp OU=Computes,OU=Toronto,DC=domain,DC=com
Replace "OU=Computers,OU=Toronto,DC=domain,DC=com" with the distinguished
name of the OU you want them to end up in.
--
JPolicelli, MVP - Directory Services

This posting is provided AS IS with no warranties and confers no rights.
Always plan and test.

http://johnpolicelli.wordpress.com/
----

Post by april

Post by Florian Frommherz [MVP]
April,

Post by april
Is there any way that I can move computer object and user object to
specified OUs from AD default containers (computers OU or users
OU)through group policy ?

Group Policy can't do that. Group Policy only forces settings on the
client's Operating System (Windows) not on its AD objects or AD itself.
If you're in a domain with Server 2003 domain functional level, have a
look at the two command line tools "redircmp" and "redirusr". They
redirect newly created users and machines to OUs you specify.
cheers,
Florian

Thank you so much for your response.
Can you advise how I can automate this process every time there is a new
user or computer to be created by using these two command line tools?
We are in a Windows 2003 domain functional level. And also I have
separated OUs for admin users and admins' computers and regular users and
their computers.
Thank you again.

[Florian Frommherz [MVP]]

April,

Post by april
Can you advise how I can automate this process every time there is a new
user or computer to be created by using these two command line tools?
We are in a Windows 2003 domain functional level. And also I have
separated OUs for admin users and admins' computers and regular users
and their computers.

The two command line tools redircmp and redirusr are a
"one-catch-them-all" approach meaning: once you executed those two, all
newly created objects will be redirected to the OUs you specified during
tool execution. With those two, you cannot really decide case by case
whether this is an admin user or not. If that is not an option for you
(although I think that you're not going to have too many new admins and
admin computers that you couldn't be able to move them by hand), you'd
have to "prestage"/pre-create the objects in AD and put them into the
right OU. On domain join, the computers will automatically (if the names
match) be "linked" to the previously created computer account.

cheers,

Florian

[JPolicelli [MVP-DS]]

Hi April,

Although Group Policy is not an option, you do have other options. The
option that applies to you will depend on your exact requirement(s) for
moving the computer and user objects, so I will cover a couple...

If you want to change the default OU that users and computers are created
in, then you can use the redirusr and redircmp command-line tools,
respectively. The redirusr command-line tool allows you to redirect new
users to another OU, instead of the default Users container. Similarly, the
redircmp command-line tool allows you to redirect new computers to another
OU, instead of the default Computers container. You need to specify the OU
you want to redirect to for each. To perform these actions, your Domain
Functional Level must be set to Windows Server 2003 at minimum. You can find
more information here: http://support.microsoft.com/kb/324949.

If you want to programmatically move computer and user objects from one OU
to a specific OU, you can use a script. This is common, for example, when
you have a naming standard that is used for computers. You can create a
script that queries the default Computers container and moves objects from
the Computers container to their proper OU based on the naming standard.
--
JPolicelli, MVP - Directory Services

This posting is provided AS IS with no warranties and confers no rights.
Always plan and test.

http://johnpolicelli.wordpress.com/
----

Post by april
Is there any way that I can move computer object and user object to
specified OUs from AD default containers (computers OU or users OU)through
group policy ?
Thank you very much!

[Jorge Silva]

Hi
As other said, GPO is not an option, but you can acomplish that using cmd
tools or through the GUI.
--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

Post by april
Is there any way that I can move computer object and user object to
specified OUs from AD default containers (computers OU or users OU)through
group policy ?
Thank you very much!

[Jorge de Almeida Pinto [MVP - DS]]

either script it or use NETDOM at the clients/servers to put the computer
account in the correct OU
--
Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------

Post by april
Is there any way that I can move computer object and user object to
specified OUs from AD default containers (computers OU or users OU)through
group policy ?
Thank you very much!