OUs in operations

In Chapter 3, Designing an Active Directory Infrastructure, we learned how we can represent an organization based on domains. But this hierarchical design has border boundaries. There, we do not consider object class requirements. OUs help us to define the hierarchical structure for objects within the domain boundaries based on company requirements.

There are three main reasons for creating an OU:

• Organizing objects
• Delegating control
• Applying group policies

Organizing objects

An AD domain controller supports holding nearly two billion objects. As the number of objects increases in the infrastructure, the effort we need to put in to manage them also increases. If we have a proper structure to group these...