What is the difference between a group and an organizational unit?

A

Alexander2014-12-17 07:06:12

Active Directory

Alexander, 2014-12-17 07:06:12

Dealing with AD, I came across a question that I personally do not understand at all. There are two structural units in AD - a group and an organizational unit, OU. What is the difference?
They write that groups are used to restrict access, and organizational OUs are used for group policies and delegation of administrative rights; but it seems like you can actually do everything with the help of one of the two. Why are they duplicated? What should be the ideal domain structure?

Reply

Answer the question

In order to leave comments, you need to log in

1 answer(s)

O

oia, 2014-12-17
@oia

Ou is distributed by gpo, and groups are units of access control to hell resources blogs.technet.com/b/vladygin/archive/2009/10/20/ad...