jsandys
Posts: 463
Score: 17 Joined: 3/24/2005 From: San Antonio, TX Status: offline
|
It really depnds on what your goals are for the specific GPO. I rarely use top level OUs or sites, it just casts the net too wide. Sites also have the potential problem of applying to multiple domains if they exist in the same site. This question should be addressed in your OU design as one of the major considerations when design OUs is how are you going to manage the AD objects and resources. Check out this article in TechNet magazine for an in-deph discussion: http://blogs.technet.com/tnmag/archive/2008/05/02/designing-ou-structures-that-work.aspx.
_____________________________
Jason ________________________________________ http://myitforum.com/cs2/blogs/jsandys/default.aspx
|