Question

When setting up ous in a new domain, why might it be useful to put all computers in one ou and all users in another?

- It will be easier to inventory computers in the domain.
- It will help organize users into user groups.
- An OU must contain either users or computers, but not both.
- Policies generally apply to either computers or users.

Answer 1

When setting up OUs in a new domain, it is useful to put all computers in one OU and all users in another. This aids in inventory management, organization, and policy application.

Step-by-step explanation:

When setting up OUs in a new domain, it can be useful to put all computers in one OU and all users in another for several reasons:

1. It helps with inventory as all computers are grouped together, making it easier to keep track of them.
2. It helps with organization by allowing users to be placed in user groups for efficient management and applying policies specific to those groups.
3. An OU in Active Directory (AD) can contain either users or computers, but not both, so separating them into different OUs allows for proper delegation of administrative tasks and simplifies management.
4. Policies in AD generally apply to either computers or users, so separating them into different OUs allows for granular control over policy application.

Answer 2

Policy Objects (GPOs) are applied and managed within the Active Directory domain. This setup facilitates the efficient application of policies based on the nature of the objects. Policies generally apply to either computers or users.

What happens with the policies

Group Policy Objects (GPOs) in Active Directory allow administrators to manage and apply policies that affect computer settings or user settings.

By segregating computers and users into separate OUs, administrators can more easily apply specific policies to either computers or users without affecting the other group unnecessarily.