Getting Started: Delegated OUs
Requesting a delegated OU with the UW Windows Infrastructure (UWWI) is a common way of
making use of the automatically-provisioned Windows user accounts that correspond
to UW NetIDs (hereafter referred to as UWWI user accounts).
After successfully obtaining a delegated OU, joining computers, and configuring your resources with the appropriate access controls,
you will be able to tell your clients to login with UWWI user accounts to
obtain access to your Windows-based resources.
Preparing to Make a Decision
benefits of a UWWI Delegated OU and decide whether you want one.
Understand the practices surrounding UWWI
- Understand the landscape of UWWI: UWWI users,
and UWWI Policy.
Review common ways you might use UWWI with a
Requesting a Delegated OU
Determine the name of the OU you'd like to obtain.
Determine the computer name reservations
you'd like to request, after
reviewing how UWWI computer naming works.
Request your Delegated OU. Note that the OU Request
page will prompt you for NetID credentials. You will need to enter your name as "netid\your-UW-username".
Notable pre-requisites include: a mailing list with
all your OU admins, the UW NetID for a computing director or equivalent,
desired OU name, and desired computer namespace reservations.
As part of the request process, your Windows administrators will
need to get a 2-factor security token and Admin UW NetID(s), as
Using Your Delegated OU
- Adapt your approach to administration by using
the right tools
- Consider requesting a
UW NetID Computing Support Org to be able to
manage UWWI user attributes and other delegated OU settings.
- Review the
UWWI Migration Blueprint to find out how to migrate an existing
Windows domain into your new OU.
- Consider bulk importing your existing domain's groups
If your computers have firewalls, ensure that the
firewalls do not restrict access to UWWI.
- Add computers to UWWI the correct way. See
Adding a Computer to a UWWI Delegated OU and
Mac to a UWWI Delegated OU.
- If needed, make use of the
Delegated OU Computer Groups
to replace Domain Computers.
- If desired, read about
on computers in your Delegated OU.
- For workstations in your Delegated OU that need DDNS services,
- Consider using
Group Managed Service Accounts (gMSAs) for your service account needs.
- If you accidentally delete something in your OU, you can request an
Item Level Restore.
- Review the
UWWI FAQ on Delegated OUs for questions that might help you.
- Enjoy UW NetID based login to your workstations and servers!