Creating an Organization Unit

                                          Organization Unit

• It is a logical container which contains active directory objects(User, Groups, Organization Unit, & other objects)
• It is Also called as a subtree.
• It is used for minimizing administrative tasks.
• It is used  for Organizing and managing the  active directory object
• It is used for delegating the control to one or more users.

Creating an Organization Unit

1. In System 1 DC login as administrator.
2. Open that ADUC console
3. Right click on Domain Name preetam.com
4. click new> Organization Unit
5. write OU name sales and click ok.
6. In the sales, Organization Unit creates some user account Ex. x1 & X2 user.

 Applying Delegation control right on sales Organization Unit

1. System DC login as administrator open  ADUC console.
2.  sales Organization Unit
3. Click on Delegate console
4. Click on next
5. Click add type use name Sam and click on ok and  click next
6. check the box  creat, delete manage user account 
7. click next and finish.

Verification

In System 1 DC log in as SAM user

give allow login locally permission to 

open sales  Organization Unit and create account us.