Mastering Active Directory - Second Edition

The container model

In Containers versus OUs section, I mentioned about default containers in AD environment. One of the characteristics of this default container is that it has large administrative boundaries. As an example, the Computers container will contain any computers added to the AD by default. It can be a physical server, virtual server, desktop computer, or laptop. The container model is based on a similar concept. This is mainly suited for small businesses where you have limited administrative and security requirements with AD objects. When OU boundaries are large, it is not possible to apply tailored group policies or precise delegated controls as each OU can contain different classes of objects:

In the preceding diagram, the ...