Documenting the OU Design for Each Domain

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Assemble a team to design the OU structure that you use to delegate control over resources within the forest. The forest owner might be involved in the design process and must sign off on the OU design. You might also involve at least one service administrator to ensure that the design is valid. Other design team participants might include the data administrators who will work on the OUs and the OU owners who will be responsible for managing them.

It is important to document your OU design by listing the names of the OUs that you plan to create, and for each OU, documenting the type of OU, the OU owner, the parent OU, if applicable, and the origin of that OU.

For a worksheet to assist you in documenting your OU design, see "Identifying OUs for Each Domain" (DSSLOGI_9.doc) on the Windows Server 2003 Deployment Kit companion CD (or see "Identifying OUs for Each Domain" on the Web at https://www.microsoft.com/reskit).

Example: Documenting the OU Design for Each Domain

The HR department of Contoso Corporation needs to delegate control over print server administration and user accounts for HR employees and management of the HR database servers to three separate data administrators in their group. They designed an OU structure based on these needs. To assist the deployment team in implementing the OU design, they documented their OU design plans.

Figure 2.46 shows the documentation that the HR department created for their OU design.

Figure 2.46   Example of an Identifying OUs for Each Domain Worksheet