OUs in operations

In Chapter 3, Designing Active Directory Infrastructure, you learned how we can represent an organization based on domains. But this hierarchical design has border boundaries. There, we do not consider object class requirements. Organizations units help you define the hierarchical structure for objects within the domain boundaries based on the company requirements.

There are mainly three reasons for creating an OU:

• Organizing objects
• Delegating control
• Group policies

Organizing objects

An Active Directory domain controller supports holding nearly 2 billion objects. As the number of objects increases in the infrastructure, the effort we need to put in, in order to manage it also increases. If we have a proper structure to group these objects into small groups, then we have more control over it and we know at a glance where we can find the specific object:

In the preceding example, Rebeladmin Corp. has nearly 100 salespersons. They are also using nearly 150 desktops and laptops...