OUs in operations

In Chapter 3, Designing an Active Directory Infrastructure, we learned how we can represent an organization's logical structure based on domains. But this hierarchical design has border boundaries. Therefore, we do not consider object class requirements. OUs help us to define the hierarchical structure for objects within the domain boundaries.

There are three main reasons for creating an OU:

• Organizing objects
• Delegating control
• Applying group policies

Let's go ahead and look into each of these points in detail.

Organizing objects

An Active Directory domain controller supports holding nearly two billion objects. As the number of objects increases in the Active Directory environment, the effort we need to put in to manage them also increases. If we have a proper structure to group these objects into smaller groups, then we have more control over them and we know at a glance where we can find a specific object...