Active Directory Container?

An Active Directory container is a logical structure within a domain used to organize and group AD objects such as:

• Users
• Computers
• Groups
• Other containers

 Types of Containers-

1. Built-in Containers (Default Containers):
   • Created automatically when a domain is set up.
   • Examples:
     • Users – contains default user and group accounts.
     • Computers – the default location for domain-joined computers.
     • Domain Controllers – holds all domain controller accounts.
2. Custom Containers:
   • Can be created using tools like ADSI Edit, but Organizational Units (OUs) are typically preferred for this purpose because of their flexibility.

 Containers vs. Organizational Units –

 Managing Containers

• You cannot directly apply Group Policy to containers.
• Objects placed in containers like Users or Computers are more difficult to manage with policies.
• Best practice: Move objects into OUs for better control (e.g., GPO assignment, delegation).

 Example Scenario

• When you join a computer to the domain, it automatically goes into the Computers container — unless you configure a default OU.
• If you create a user without specifying a location, it might end up in the Users container.