Mastering Active Directory

The object type model

Active Directory contains different types of objects, such as users, groups, and computers. It is possible to group these different types of objects into separate OUs and manage them. Each of these types can be further categorized into child OUs based on geographical locations or roles and responsibilities:

In the preceding example, OUs are mainly categorized based on object types Users and Computers. The Users OU is further categorized into Administrators and Standard users. These were based on privileges level, and each object's responsibilities within the organization. The Computers OU got the child OU for Servers ...