1. Active Directory Organizational Units
3.1
Manage Active Directory Objects
Active Directory Organizational Units
TestOut Server Pro 2016: Identity

2. Section Skill Overview
Delete organizational units.
TestOut Server Pro 2016: Identity

3. Key Terms
Container
TestOut Server Pro 2016: Identity

4. Key Definitions
Container: A container is a built-in object used for organizing network resources within a domain. However, unlike OUs, a container cannot be altered without making changes to the Active Directory schema.
TestOut Server Pro 2016: Identity

5. Active Directory Organizational Structure
Container
Organizational Units
TestOut Server Pro 2016: Identity

6. Active Directory Containers
Are automatically created by installing AD.
Cannot be deleted or renamed.
Should not be modified or used by the administrator.
Cannot apply Group Policy Objects .
Container Object
TestOut Server Pro 2016: Identity

7. The Active Directory Administrator
Is automatically created by installing AD.
Has full domain control.
Should only be use only when required.
Should incorporate a strong password.
By default, is a group member of:
Administrator
Domain Admins
Enterprise Admins
Can modify the Active Directory schema.
Group Policy Creators Owners
Schema Admins
TestOut Server Pro 2016: Identity

8. Default Computer Container
By default, new computers are added to the container named Computers
Use redircmp to change the location for new computers
Requires Windows 2003 or higher functional level
Example: redircmp ou=ACME_Comp,dc=CorpNet,dc=xyz
TestOut Server Pro 2016: Identity

9. Organizational Unit Created by administrators.
Active Directory creates the Domain Controllers OU.
Used to organize users and computers.
Organizational Unit
When promoting a server, computers in the Computer OU are moved to the Domain Controller OU.
TestOut Server Pro 2016: Identity

10. Distinguished Name Every object has a distinguished name.
Includes the common name and its place in AD.
Distinguished names with spaces require quotes.
CorpNet.com
CN=Shad,OU=Tech,DC=CorpNet,CD=com
Common Name
Location in Active Directory
TestOut Server Pro 2016: Identity

11. Distinguished Name Every object has a distinguished name.
Includes the common name and its place in AD.
Distinguished names with spaces require quotes.
The distinguished names include all objects
and its type.
Each part referenced individually.
Type
Designator
Common Name CN
Container
Organizational Unit OU
Domain DC
TestOut Server Pro 2016: Identity

12. Organizational Unit Design
Mirror the logical structure of your company.
Used for effective:
Administration (control delegation)
Group Policy implementation
Bank.com
OUs to match organization
TestOut Server Pro 2016: Identity

13. Summary Use OUs to aid in management.
TestOut Server Pro 2016: Identity

14. In-Class Practice Do the following labs:
3.1.5 Delete Organizational Units
TestOut Server Pro 2016: Identity

15. Class Discussion How can you protect objects from accidental deletion?
TestOut Server Pro 2016: Identity