NetWare Directory Services

7-9

Planning NetWare Directory Services Implementation

Planning an Organizational Directory Tree

If your organization is large, you might want to implement an organizational

Directory tree. Plan only the top levels, and then allow individual sites to

create and administer their parts of the Directory tree.

Consider the following strategies when planning this type of Directory tree:

• After installing the first server into the tree at the organizational level, log in and

use the administration utilities to create the next Organizational Unit (OU) levels

in the Directory tree. Then, create a User object in each OU with all rights to that

container object.

• After creating the User objects indicated above, use a partition utility

(PARTMGR or NetWare Administrator) to change each OU into a partition root.

However, you should create partitions only if doing so will ease network

administration, provide a level of fault tolerance, or decrease WAN link traffic.

This strategy enables the [Root] level network supervisor to manage the whole

network while providing administration duties to supervisors of each partition or

local network. Local network supervisors can help build the tree by installing

servers in their respective Organizational Units while being administratively

restricted to their particular portions of the tree.

• You should use only one Directory tree in your organization so that you can take

advantage of the global features of NDS. Rather than create a separate tree for

resources you want to deny access to, use NetWare 4 security features to control

access to any part of the Directory tree.