Legacy OU's

Forums › IT Pro and developers › Legacy OU's

tatbaird

142 posts

Master Geek

#106721 30-Jul-2012 17:42

Hi guys,
Is there any way I can find out if a particular OU is actually being used for anything in current production, with an eye to cleaning up AD. There are quite few child OU's within these too.

Cheers

Zeon

3916 posts

Uber Geek

Trusted

#664132 30-Jul-2012 18:00

Lol have you looked in the OU to see if anything is there?

Speedtest 2019-10-14

tatbaird

142 posts

Master Geek

#664143 30-Jul-2012 18:48

Zeon: Lol have you looked in the OU to see if anything is there?

lol yourself. The OU's in question, of which there are quite a few, contain older security groups, child OU's which in turn contain other objects, legacy printer groups and, presumably, several little trolls like you. I would hate to blitz a troll like you from within a parent OU just because it's not contributing anything constructive to my AD domain. No wait. Yes I would.

mjb

996 posts

Ultimate Geek

Trusted

#664205 30-Jul-2012 20:27

tatbaird: lol yourself. ...... No wait. Yes I would.

Heh, damn, GZ needs a thumbs up button... in the meantime, +1.. that was awesome.

contentsofsignaturemaysettleduringshipping

mmlakeman

106 posts

Master Geek

#664259 30-Jul-2012 21:35

ShareEnum and AccessEnum would be the tools I'd use to try looking for Share/NTFS permissions related to the group.

http://technet.microsoft.com/en-us/sysinternals/bb897442.aspx
http://technet.microsoft.com/en-us/sysinternals/bb897332.aspx

Users may have been added to a security group only for the purpose of placing that group in an OU that has a group policy applied.

GPMC is the quickest way I know of to find out what a group policy actually does.
If there are no GP's applied to the OU's then you could at least consolidate all the objects into 1 OU...

tatbaird

142 posts

Master Geek

#664293 30-Jul-2012 22:32

Ok nice, thanks. Will look into it tomorrow and hopefully post a solution back here FYI.

Cheers