Networks

Ask something
Discussion Locked

Creating a Sub OU on a domain controller

0 helpful
1 reply

by tristanbrown

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I would like to know if it is possible to create a sub OU on a windows 2000 server running active directory. I know a child domain can be created but I do not want this. The purpose being that a off site location has a domain controller and i would like to create a sub OU to give the tech dept full admin rights on that controller. I heard this was possible and have seen this done I just don't know how.

1 reply

by timwalsh

Tristan,
This may just be a semantics issue, but I want to make sure we're on the same sheet of music.

In my mind, if you say "sub" OU, you are talking about a second level of nested OUs (or a child OU). Is this what you are asking about?

It sounds as if both sites(primary location and off-site location) are presently part of the same domain. Is this correct? If so, this could be as easy as creating an OU within your domain and moving all computers and users at your off-site location into the OU. Then delegate administrative authority of that OU to the off-site tech department. But, even if the DC is also placed in the OU, the off-site tech dept. will only be able to manage GPOs applied to the OU. They will not be able to manage any GPOs applied to the domain (such as Account Policies).

The only way to grant administrative rights over only the off-site domain controller (vs. the entire domain) is to create a child domain.

This discussion is closed to new replies.