Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


tatbaird

142 posts

Master Geek
+1 received by user: 8


#106721 30-Jul-2012 17:42
Send private message

Hi guys, 
Is there any way I can find out if a particular OU is actually being used for anything in current production, with an eye to cleaning up AD. There are quite few child OU's within these too.

Cheers




Well let me just quote the late-great Colonel Sanders, who said "Im too drunk to taste this chicken." -Ricky Bobby


Create new topic
Zeon
3926 posts

Uber Geek
+1 received by user: 759

Trusted

  #664132 30-Jul-2012 18:00
Send private message

Lol have you looked in the OU to see if anything is there?




Speedtest 2019-10-14




tatbaird

142 posts

Master Geek
+1 received by user: 8


  #664143 30-Jul-2012 18:48
Send private message

Zeon: Lol have you looked in the OU to see if anything is there?


lol yourself. The OU's in question, of which there are quite a few, contain older security groups, child OU's which in turn contain other objects, legacy printer groups and, presumably, several little trolls like you. I would hate to blitz a troll like you from within a parent OU just because it's not contributing anything constructive to my AD domain. No wait. Yes I would.




Well let me just quote the late-great Colonel Sanders, who said "Im too drunk to taste this chicken." -Ricky Bobby


mjb

mjb
996 posts

Ultimate Geek
+1 received by user: 67

Trusted

  #664205 30-Jul-2012 20:27
Send private message

tatbaird: lol yourself. ...... No wait. Yes I would.


Heh, damn, GZ needs a thumbs up button... in the meantime, +1.. that was awesome.




contentsofsignaturemaysettleduringshipping




mmlakeman
106 posts

Master Geek
+1 received by user: 9


  #664259 30-Jul-2012 21:35
Send private message

ShareEnum and AccessEnum would be the tools I'd use to try looking for Share/NTFS permissions related to the group.

http://technet.microsoft.com/en-us/sysinternals/bb897442.aspx
http://technet.microsoft.com/en-us/sysinternals/bb897332.aspx

Users may have been added to a security group only for the purpose of placing that group in an OU that has a group policy applied.

GPMC is the quickest way I know of to find out what a group policy actually does.
If there are no GP's applied to the OU's then you could at least consolidate all the objects into 1 OU...

tatbaird

142 posts

Master Geek
+1 received by user: 8


  #664293 30-Jul-2012 22:32
Send private message

Ok nice, thanks. Will look into it tomorrow and hopefully post a solution back here FYI.

Cheers




Well let me just quote the late-great Colonel Sanders, who said "Im too drunk to taste this chicken." -Ricky Bobby


Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.