Sometimes it’s useful to pre-create computer objects in the correct OU before joining them to the domain. This way, you know that they will immediately pick up whatever Group Policies have been assigned to the OU. Of course, you can create the computer objects in AD manually using Active Directory Users and Computers (dsa.msc) or… Read More »
***This article has been superseded by a more recent one on the same topic. Click here for details *** It is sometimes useful to have the ability to populate group membership based on the OU in which the prospective members are located. A good example of where this might be useful is with Fine-Grained Password… Read More »
Windows Server 2008 R2 introduces the ability to revert to an earlier forest or domain functional level. Previous versions of Active Directory did not have this ability and raising the forest or domain function level was, effectively, a one-way operation. I say “effectively” because it is possible to revert, but only through highly disruptive recovery… Read More »