Software

Ask something
Discussion Locked

OU level Replication of Active Directory

0 helpful
2 replies

by ziqbal452

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello

I have a domain controller at head office and addition domain controller at branch office.
replication is working fine in both these.
Now i want that only ONE Organization unit (say Branch user)replicate and not all the active directory. any suggestion??/
OR

i want to give permission to Support persons at branch office only one OU (say Branch user) can access and create user, change passwords etc for said OU??

No other OU can accessible on addition domain controller at Branch office.

thankx in advance
zafar

2 replies

by cg it

you can delegate authority and create a MMC for that purpose.

your OU structure design can take on whatever you want. So for a 1st level you could create 2 OUs one branch one HQ. you delegate authority and create a MMC that allows those given authority to manage their respective group policies.

by ziqbal452

i have an idea about it but i am little bit confused.

these are step that i try to implement

i create an OU on Head Office domain Controller name DC1.
then create user names in that OU
next i delegate control to this OU
and complete the wizard
after completeing the wizard i try to use login user of this OU but error not login interactively error
and same on branch office DC2

i think there is mistake in steps or else

i want to allows the permission only two technical staff member at branch office and they are only have the permissions to view or access the only Branch office user folder in the list of Active Directory.

any suggestion

This discussion is closed to new replies.