Mastering Active Directory

The department model

In the organization, departments help represent the hierarchical order as well as responsibilities. The same structure can be converted into the Active Directory OU structure. Users and asserts related to each department will be categorized together:

In the preceding example, the OU structure starts with the departments. Each department has its own OU, and its objects are further categorized based on the class and responsibilities. This allows you to delegate control to objects in each department easily. As an example, managers in each department can be set up with delegated control to add or modify objects under their ...