Mastering Active Directory - Second Edition

The object type model

As we are aware, AD contains different types of objects, such as users, groups, and computers. It is possible to group these different types of objects into separate OUs and manage them. Each of these types can be further categorized into child OUs based on geographical location or roles and responsibilities:

In the preceding diagram, OUs are mainly categorized based on the Users and Computers object types. The Users OU is further categorized into Administrators and Standard users. These were based on the privilege level and each object's responsibilities within the organization. The Computers OU got the child OU for ...