Thanks, I’ll look into trying that. I was looking into nesting our admin users withing the lower odmaster’s groups, but I like your idea better.

As far as why our directory is setup in it’s current way, I believe a previous admin was looking to compartmentalize the domains and give each site the ability to manage their own local directory without being able to monkey with upper level directory users, groups and mcx settings. We are currently mixing computer list mcx settings from the upper domain with group list settings on the lower domain.

Our client’s directory access authentication settings are as follows:
/Netinfo/DefaultLocalNode
/LDAPv3/localodmaster
/LDAPv3/odmaster

Me and the current co’admins have looked into demoting the lower level directories back to stand alone then making them replicas but have yet to pursue that course of action further. It’s a curious setup but so far it works.

Thanks

Fantastic, I finally got a chance to try that out in my test environment. Your suggestion worked great, now to deploy it in the real world.

Thank you to MacTroll,
Richard Bezanson,
Jordan School District

Oh, and I noticed that I probably should have posted this in the questions and answers section. Sorry about putting this post here.