Creating a Server Organizational Unit (OU) Domain Configuration

Creating a Server Organizational Unit (OU) Domain Configuration


In order to control your Server configuration for your Department in the Andrew Windows environment, we recommend that you have an Organizational Unit (OU) delegated to your department.  If you do not have an OU already, please send email to advisor@andrew.cmu.edu requesting an OU.  Please include the name and Andrew User ID of the primary point of contact for the OU administration.

After the OU has been created, we recommend that you create a sub-OU for your Member Server.  Please see the Administration Guide for Andrew Windows for specific instructions.

  

Blocking Inheritance

In order to ensure that software packages and GPO Settings from parent objects do not propagate to your Member Server, we recommend that inheritance for the Server OU be blocked.  Please see the Administration Guide for Andrew Windows for instructions on blocking inheritance.

Custom GPO for Server OU

We recommend that a custom GPO be configured for this Server OU.  To request the GPO creation, send email to advisor@andrew.cmu.edu.  This GPO can then be linked to the Server OU and configured with custom software packages.  Custom Security settings can also be adjusted via this GPO. 

The core Andrew software installers are currently available on internet. They are distributed as .MSI files, which utilize Microsoft’s, Microsoft Installer technology.  License permitting, these MSI’s can be copied and then linked to the local GPO.  If you do not have access to a desired MSI, please send email to advisor@andrew.cmu.edu.

We strongly suggest that you do not link GPO’s directly to the MSI’s on the Dist Server.  This core distribution is maintained for Computing Services Computer Clusters and may change without notice.  As an alternative, consider copying the MSI’s to a local file share.

In addition, many of the software MSI’s were custom built for cluster configurations and may not work as expected in your environment.  We will not support applications installed with these MSI’s.  Use them at your own risk.  At some point in the future, we hope to be able to offer stable and supportable MSI’s.