1. 9.1 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure Goals  Examine OU designs  Design an OU structure for administration  Design an OU structure fore Group Policy application

2. 9.2 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure  Organizational unit (OU) designs  Four basic styles  Departmental  Functional  Physical  Hybrid Examining OU Designs (Skill 1)

3. 9.3 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure  Departmental OU design  Arranges OUs by department or division; mirrors company’s structure  Typically single level, but can be multi-level  Advantages  Simple, logical design  Well-suited to delegating permissions and applying Group Policy based on company departments and divisions  Disadvantages  Design does not include separation of accounts into their own OUs, making it hard to apply delegation solely to computer or user accounts Examining OU Designs (2) (Skill 1)

4. 9.4 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure  Functional OU design  Organizes resources by function in the domain  Computer and user accounts typically separated into types  Advantage: Excellent for applying delegation and Group Policy based on function of computer and user accounts  Disadvantage: Difficult to apply Group Policy based on departments or divisions Examining OU Designs (3) (Skill 1)

5. 9.5 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure  Physical OU design  Based on location of resources  Typically divides OUs into regions and then locations  Typically used as component of hybrid model  Advantage: Useful for applying delegation and Group Policy based on regional location  Disadvantage: Makes it difficult to apply delegation or Group Policy based on department/division or function Examining OU Designs (4) (Skill 1)

6. 9.6 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure  Hybrid OU design  Combines two or more elements of the previous designs  Most common type of design  Examples  Departmental then physical  Departmental then functional  Departmental then physical then functional Examining OU Designs (5) (Skill 1)

7. 9.7 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure Figure 9-1 Departmental OU design (Skill 1)

8. 9.8 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure Figure 9-2 Multi-level departmental OU design (Skill 1)

9. 9.9 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure Figure 9-3 Functional OU design (Skill 1)

10. 9.10 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure Figure 9-4 Physical OU design (Skill 1)

11. 9.11 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure Figure 9-5 Hybrid OU design (functional then departmental) (Skill 1)

12. 9.12 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure Figure 9-6 Hybrid OU design (departmental then functional) (Skill 1)

13. 9.13 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure Figure 9-7 Hybrid OU design (departmental then physical then functional) (Skill 1)

14. 9.14 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure  Using OUs to provide for delegation of control  Primary goal is to create a structure that allows you to delegate an OU or a group of OUs  Perform a detailed examination of proposed administrative model  Build an OU structure that conforms to the administrative structure as closely as possible  This makes delegation simple and administratively efficient Designing an OU Structure for Administration (Skill 2)

15. 9.15 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure Figure 9-8 Example administrative model (Skill 2)

16. 9.16 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure Figure 9-9 OU structure for example administrative model (Skill 2)

17. 9.17 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure  Group Policy and OU design  Design OU to follow Group Policy application needs  This allows you to easily link policies without utilizing filtering, No Override, or Block Inheritance Designing an OU Structure for Group Policy Application (Skill 3)

18. 9.18 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure Figure 9-10 Example OU based on administrative model (Skill 3)

19. 9.19 © 2004 Pearson Education, Inc. Exam 70-297 Designing a Microsoft ® Windows ® Server 2003 Active Directory and Network Infrastructure Lesson 9: Planning the OU Structure Figure 9-11 Revised design for OU (Skill 3)