Planning an organizational directory tree

If your organization is large, you might want to implement an organizational Directory tree. Plan only the top levels, and then allow individual sites to create and administer their parts of the Directory tree.

Consider the following strategies when planning this type of Directory tree:

• After installing the first server into the tree at the organizational level, log in and use the administration utilities to create the next Organizational Unit (OU) levels in the Directory tree. Then, create a User object in each OU with all rights to that container object.

• After creating these User objects, use a partition utility such as PARTMGR (see ``PARTMGR'') or the NetWare Administrator, to change each OU into a partition root. However, you should create partitions only if doing so will ease network administration, provide a level of fault tolerance, or decrease WAN link traffic.

  This strategy enables the [Root] level network supervisor to manage the whole network while providing administration duties to supervisors of each partition or local network. Local network supervisors can help build the tree by installing servers in their respective Organizational Units while being administratively restricted to their particular portions of the tree.

• You should use only one Directory tree in your organization so that you can take advantage of the global features of NDS. Rather than create a separate tree for resources you want to deny access to, use NetWare 4 security features to control access to any part of the Directory tree.