Subtitles of the Movie

We use organizational units to delegate administrative authority and to distribute a group policy. So, organizational units are very important in management process. We will talk more about that later on in this training. Let us right now just talk about how do we create an organizational unit. We can crate an organizational unit within a domain or we can actually create an organizational unit within another organizational unit. And we create organizational unit in Active directory users and computers. Let us go back to active directory users and computers and we can see a management OU it is already created. If we want to create another OU at the same level as management then we would create that OU in the domain. If you right click on the domain and then come down to new and then organizational unit, we can create another unit. So for example may be human resources. Create a human resource OU and click on Ok. So now we have a human resources OU to go along with our management OU. If we wanted to create a hierarchy of OUs, we could then select to create a new OU within an OU. So example within human resources we may have East decision and a West division. So you right click on human resources OU, select new and the organizational unit and then type East. Click on Ok and now we have Human Resources OU with another OU within it. A child OU to human resources called East, on the same we said East and a West, we right click on human resources again, select organizational unit and type West. Now in each of these OUs we can place users and computers and resources. OUs are containers. OU are themselves are not security objects. I will take more about this later on. But OUs are just containers. They are for 2 purposes, number 1 to delegate administrative authority and number 2 to distribute group policy. And again we will talk about that later on. But important to know right now is that we use the active directory users and computers tool to create the OUs. Then we can create hierarchies of OUs and that these OUs are just containers that we use to manage objects. Now, notice that I said that we have a management OU and we also have a domain controllers OU. So, if these other things like lost and found, foreign security principle and program data, system and user if those are not OUs then what are they? Well, they are containers. An OU is a container but OU is special type of container. Because an OU can start a hierarchy and we can delegate administrative authority to an OU. If we were to right click on a users containers for example, and then come down to new and you can see that we cannot select an OU. So we cannot start a hierarchy. So we typically will use it to establish a hierarchy. It is possible to delegate control to a container but is not recommended. We should use OUs for the purpose of delegating control. I will talk more about that later on. So the most important thing to know at this point is that, we have the tools to manage the users and computers and now we know basically how we create a computer, and we how we create a user. So, in out next chapter we will go deeper to how to actually modify user and computer properties, because our next chapter is managing users and computers. That is next.