user accounts outside of default Users OU
-
Has anyone had any issues with user accounts being outside the default User OU in Active Directory? I've run in to this a couple of times. This last time was with a RDS license server. (see http://mangolassi.it/topic/8338/rds-license-server-remove-temp-licenses) I can't remember what the other issues were, but generally I just create folders under the Users OU if I feel there is a need to break things up for delegation or tasks like that.
-
Nope. We don't put any users there. That is actually a Folder and not an OU if it's the default 'Users" one.
Most likely somethings wrong with a Scope somewhere if you have issues with it.
-
@Mike-Davis said:
I just create folders under the Users OU if I feel there is a need to break things up for delegation or tasks like that.
It's a folder not an OU so you still can't apply Group Policies to it.
-
Like Jason I have a different set of OUs setup... Real OUs.
You can probably change your RDS licensing to read another ad folder.
-
I just went and looked at some other domains I set up and I did create real OUs outside of the Users folder and everything is working right. I'll look in to the scope of the RDS server and see if it can be changed. It might be the only app that doesn't like the users in other OUs.
-
Regarding the scope of the RDS license server, the only scope options are entire domain or entire forest.
https://technet.microsoft.com/en-us/library/cc725729.aspx -
There must be a permission thing somewhere. Weird.
-
To see if I could reproduce the error by moving the account from the default Users folder back to the OU where it was I discovered that when I moved it to the Users folder the error went away. I put the user back in the OU where it came from and the error won't come back. I agree - weird indeed.
In summary, I guess if I move those users to the Users folder and back where they came from, the problem should be resolved. I'll have to test on a couple other users.