Designing Organizational Units for Delegation of Administration

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Forest owners are responsible for creating organizational unit designs for their domains. Creating an OU design involves designing the OU structure, assigning the OU owner role, and creating account and resource OUs. Initially, design your OU structure to enable delegation of administration. When the OU design is complete, you can create additional OU structures for the application of Group Policy to the users and computers and to limit the visibility of objects. Figure 2.35 shows the process for creating an organizational unit design.

Figure 2.35   Process for Creating an Organizational Unit Design