Hello.
Can anyone offer advice.
If you were setting up a new domain with about 10,000 users across various countries within Europe, how many levels of OU would you advise. It has been suggested that to use more than OU1 would be un-managable.
Your experience would be most appreciated.
Many Thanks
Clive
Subject: How many OU’s
For user, If it were me I’d setup 1 OU for each country. I wouldn’t use the Country Code part of the certifier though, I’d use the OU portion to designate the country, just my preference. I put a C in front because the OU must be at least 3 characters:
Italy - /CIT/ACME
Poland - /CPL/ACME
Singapore - /CSP/ACME
Sri Lanka - /CLK/ACME
USA - /CUS/ACME
Depending on how your servers are arranged you may choose to have an OU just for all servers and put the country code in the server name:
Italy - ITMAIL01/SRV/ACME
Sri Lanka - LKAPP01/SRV/ACME
For admin purposes I like to keep the certifier length as brief as possible. Ths cuts down on typing and on data size.
Subject: RE: How many OU’s
Thanks for that Paul, I didn’t know there was a three digit minimum for OU’s. What about using OU2 or even OU3, do you think its necessary with large domains?
Subject: RE: How many OU’s
keep it as simple as possible but use the extra levels if needed. It really all depends on your security model and how you ewant to group people. if you create too many OU’s it can get pretty hairy trying to keep track of them when user’s change depts, locations, etc…