OU Best Practices pg 58

[kohlbek1]

Another minor one.

On page 58 it states, "As you can see in this example (and in the real world), a best practice is to separate users and computers into their own OUs and then link GPOs to those OUs."

Would it be better to say, "...best practice is to separate accounts and resources into their own OUs...", or not?

[AdamV]

I would use the term computers in this context, since policies apply to users or to computers quite specifically, and that terminology persists throughout the GP world (and the GPMC in particular).

"Resources" can be things like printers, or network shares - anything used by a user. They don't necessarily exist as domain objects and do not have any bearing on GP. In my opinion it is clearest as it stands.

Nice to know you're reading the book in detail, though!