Accessibility statement

Active Directory

Related pages

Active Directory provides a directory of computers, users and security groups.

It is used for authentication and authorisation mostly by Windows systems.



Only DCOs are able to request this service.

We can provide systems administrators with delegated access to manage an Organisation Unit (OU).

This allows you to:

  • store server objects
  • create and manage security groups and membership of them
  • create and manage locally administered service and administration accounts

We are also able to offer:

  • creation of a Group Policy Object (GPO) with delegated update rights
  • automatic placement of machines with custom desktop images into the relevant delegated OU, so that locally managed policies are then applied to it

System requirements

The system administrator must be using a computer running Microsoft Windows 7 or later, and on the University's ITSYORK domain

The machines to be managed must be running an operating system supported by Microsoft.

The Active Directory provided uses Active Directory Domain Services for Windows Server 2008 R2, and provides Domain and Forest Functional Level Windows Server 2008 R2.

How to request

To request this service, please contact the IT Support.

The following requests each take three working days to complete:

  • creation of an OU with delegated management access
  • creation of a GPO with delegated update rights
  • placement of machines with custom desktops into the relevant OU

Our commitments

Service status Live and supported service.
Hours of service 24/7
Service support For help and support with this service, contact the IT Support.
Hours of support Help from the Library & IT Help Desk is available 9am to 5pm, Monday to Friday.
Target availability

General IT Services targets:


Active Directory is a critical service and is provided using a mix of physical and virtual computers located in separate locations.

The servers can act independently but in normal operation are synchronised with each other.

Only one of the servers is needed to be operating in order to provide the Active Directory service.

Our performance

Our service standards have been produced in consultation with our customers, and monitor the quality, timeliness and access to facilities and services:

Complaints procedure

If you wish to give us general feedback on this service, please see our Feedback page for ways to get in touch.

If you wish to make a complaint, please see our complaints procedure.

Your responsibilities

We expect you to:

  • have a working knowledge of and competency at managing Active Directory
  • keep us informed about changes to your contact details