Hi all,
I originally setup all my users under the default users container. I wanted
to use group policies in a different way so I decided to move all my users
and groups to a new OU.
I originally was using the default domain users group to assign security
rights. Now I want to assign security rights by the OU but when I go to a
workstation program folder and try to setup security by using the OU it's not
an option.
My goal is to have two OU's one that is restricted and one that is not. I
want to assign rights to the users by using those two OUs.
What is the best way to do this? Do I need to create two groups under the
OUs instead (one restricted and one unrestricted and put all the users in
those groups so that I can assign rights by groups?
Also, do I just leave all the default groups created by the system under the
default users groups (like domain users, DHCP users, ect.
I was assigning rights by using the domain users group but I have a need to
have third party vendors have access but not to everything I assign all my
users to using domain users group. Do I just remove vendor user from the
domain users group? Will the vendor user still be able to login without
being in the domain users group?
Thanks in advance
Sher