Planning an Organizational Directory Tree

After installing the first server into the tree at the organizational level, log in and use the administration utilities to create the next Organizational Unit (OU) levels in the Directory tree. Then, create a User object in each OU with all rights to that container object.

After creating the User objects indicated above, use a partition utility (PARTMGR or NetWare Administrator) to change each OU into a partition root. However, you should create partitions only if doing so will ease network administration, provide a level of fault tolerance, or decrease WAN link traffic.

This strategy enables the [Root] level network supervisor to manage the whole network while providing administration duties to supervisors of each partition or local network. Local network supervisors can help build the tree by installing servers in their respective Organizational Units while being administratively restricted to their particular portions of the tree.

You should use only one Directory tree in your organization so that you can take advantage of the global features of NDS. Rather than create a separate tree for resources you want to deny access to, use NetWare 4 security features to control access to any part of the Directory tree.