5.1 Managing OUs and the Active Directory

An organizational unit (OU) is a container in the Active Directory. OUs can contain user accounts, groups, computers, contacts, and other OUs. However, an object can only be a member of one OU at a time. OUs cannot contain objects from other domains. In Microsoft Windows, an OU may be the smallest unit in which you can use your administration powers.

5.1.1 Built-in Containers

In addition to OUs, Microsoft Windows creates built-in containers automatically. You can neither rename these containers nor create another OU with the names of these containers. There may be additional limits on what objects these containers may contain. DRA presents only the valid options for each type of OU, object, or container.