We are a decent sized shop, to the point where we have a central IT that "owns" Active Directory, but we have some departmental IT, some of them are OU admins, many are coming from there own domains. the want the ability to create OUs. within there departmental OU. my inclination is to say no, down the road i don't want some unsprawlly OU layout.
but if i say no, management wants me to have dome sort of documented reasons, other than we don't trust them sorts of stuff. (or MS kb articles saying why OU sprawl is bad?)
anyone have anything on this?
-Nex6