organization Units

AD object

• contains users ,groups, computers
• mostly for simplifying administration
• not for permissions
• very powerful with GPOs
• job role/dept 

default Users and computer containers: not OUs

Redirusr and redircmp

Create and delete

• OU can be protected

Delegation


user and computers created by default in Users or COmputers container.  To change this default behavior, use the redirusr and redircmp command

Then when account is created without a path it will be redirected.

To access the protection option,  select option VIEW->ADVANCED FEATURES