Mastering Active Directory

The container model

In the previous section, I explained what a container is. One of the characteristics of this container is that it has large administrative boundaries. As an example, the Computers container will contain any computers added to the Active Directory by default. It can be a physical server, virtual server, desktop computer, or laptop. The container model is based on a similar concept. This is mainly applicable to small businesses where there are limited administrative and security requirements over the Active Directory objects. When OU boundaries are large, it is not possible to apply tailored group policies or precise delegated control as each OU can contain different classes of objects as well:

In the preceding example, ...