Question

The benefit of having Organization Units is that they allow the system administrator to mimic and organization's structure for further policy administration.Organization Units can be adjusted at anytime when deemed necessary. When organization makes heavy use of Organization Units in order to break out policy management for various campus resources. Why can't Groups be used to accomplish the same task?

Answer 1

There are some distinct features of organisational units over groups as-

·         They donnot have SIDs

·         They cannot be placed on an access control list

·         They cannot be placed into a group

Organizational units are basically used to organize Active Directory objects. Its uses includes

·         They are used in delegation of administration to the objects located in the organizational unit

·         They are also used in deploying group policy settings to the objects located in the organizational unit

And if we talk about groups they are designed to grant access to data whereas in contrast organizational units are designed to control objects (delegation and group policy settings). Groups have included with a dramistic changed over the decades and over different operating systems, which might be

Responsible for the confusion. But,Organizational units are new concept (in comparison to groups) which make its understanding critical. No matter what, they are different and used in totally different ways.Also, Groups have SIDs, have the ability to be placed on access control lists, and can also contain other groups (group nesting). Where as,Organizational units do not have SIDs, so they can’t be placed on an access control list, and can not be placed into a group. So, basically organizational units are used to organize computers within Active Directory, users, groups, . This organization is used to grant delegation and deploy configuration and security settings through group policy. Basically, main reasons for organizational units and the design and deployment of them will be clear.