To create a new Organizational Unit (OU) in Active Directory, one must have administrative privileges and access to the Active Directory Users and Computers (ADUC) management console. The process involves several steps, which I will explain in detail below.
1. Launch the Active Directory Users and Computers (ADUC) management console: To do this, click on the "Start" button, go to "Administrative Tools," and then select "Active Directory Users and Computers."
2. Connect to the appropriate domain: In the ADUC console, right-click on the "Active Directory Users and Computers" node, and then select "Connect to Domain." Enter the domain name or browse to locate the domain to which you want to add the new OU, and then click "OK."
3. Navigate to the desired location: Expand the domain tree to locate the container or OU where you want to create the new OU. Right-click on the container or OU, point to "New," and then select "Organizational Unit."
4. Provide a name for the new OU: In the "New Object – Organizational Unit" dialog box, enter a name for the new OU in the "Name" field. It is important to choose a descriptive name that reflects the purpose or function of the OU.
5. Configure optional settings: In the same dialog box, you can configure optional settings such as a description for the OU and specify whether to protect the OU from accidental deletion. To add a description, enter the desired text in the "Description" field. To enable protection against accidental deletion, check the "Protect container from accidental deletion" checkbox.
6. Click "OK" to create the new OU: Once you have entered the necessary information, click "OK" to create the new OU. The new OU will now appear in the location where you created it.
It is worth mentioning that the process of creating a new OU can vary slightly depending on the version of Windows Server and the management console being used. However, the general steps outlined above should apply to most versions.
Creating a new OU in Active Directory allows administrators to organize and manage objects within a domain more effectively. OUs provide a hierarchical structure that can be used to delegate administrative tasks, apply group policies, and manage access permissions. By grouping related objects together, administrators can streamline management and improve security within their Windows Server environment.
To create a new OU in Active Directory, launch the ADUC management console, connect to the appropriate domain, navigate to the desired location, right-click on the container or OU, select "New," and then choose "Organizational Unit." Provide a name for the new OU and configure any optional settings if desired. Finally, click "OK" to create the new OU.
Other recent questions and answers regarding Examination review:
- What is the purpose of the foreign security principles container in Active Directory?
- Why is it generally recommended to create a separate OU for computers instead of using the default computers container?
- Can group policy objects (GPOs) be directly applied to containers?
- What is the difference between a container and an organizational unit (OU) in Active Directory?

