What Is an Organizational Unit?
Organizational Unit (Organizational Unit) referred to as OU is an AD (Active Directory, Active Directory) container where users, groups, computers, and other organizational units can be placed. It is the smallest scope or unit that can be assigned Group Policy settings or delegated administrative rights .
Organizational Unit
Right!
- Organizational Unit (Organizational Unit) is referred to as OU. It is an Active Directory (AD) that can put users, groups, computers, and other organizational units into it.
- Organization is a verb, which refers to the convener or initiator of an activity and the initiator of an action.
- A unit is a noun, which refers to the initiator of an activity, and generally refers to an enterprise or group, not an individual.
- Example: The organizing unit of the Asian Games is the Guangzhou Municipal People's Government.
- In layman's terms, if AD is compared to a company, then each OU is a relatively independent department. The creation of the organizational unit OU needs to be performed in the DC (domain controller). The creation steps are as follows: Step 1 Log in to the domain controller as Administrator (system administrator). Then click the "Start / Administrative Tools / Active Directory Users and Computers" menu to open the "Active Directory Users and Computers" console window. Step 2 Right-click the domain name in the left pane and execute the "New / Organizational Unit" command in the pop-up shortcut menu. Step 3 Open the "New Object-Organizational Unit" dialog box, type the name of the new OU (such as "Advertising Information Department") in the "Name" edit box, and click the "OK" button Organization's Active Directory objects, OUs create different OU hierarchies based on the company's business model. Here are several common design methods. 1. Department-based organizational units In order to have the same organizational structure as the company, OUs can be created based on various business function departments within the company, such as the administration department, personnel department, engineering department, and finance department. 2. Geographically based organizational units can create OUs for each geographic location, such as Beijing, Shanghai, Guangzhou, etc. 3. Organization units based on object types can classify various objects in Active Directory, and establish OUs for each type of object, such as according to users, computers, printers, shared folders, and so on. At the same time, in a single domain structure, an OU can also create a child OU, and its permissions are inherited from its parent OU. For example, if you set the blocking "search" under the parent OU, and set the blocking "run" under the child OU, the users of the child OU " Both "run" and "search" are blocked.