Special Edition Using Microsoft Active Directory

User Objects

At this stage we will look at user and group objects from an administrative and a management perspective—essentially, what you can do with these objects and how you create, delete, and modify them.

The user object is the best place to start because it is what you are probably most familiar with, from an administrative point of view. A user object can be created anywhere inside the domain. The user can exist in an organizational unit (OU), inside a container, or even at the root of the domain.

You will notice that initially the built-in user objects are located in the User container. Containers are different from organizational units, in that they are a separate class of object. The User container exists primarily to provide a default ...