~/moritzsamrock_

Organizational Unit

Also known as:OU

Organizational Unit: A hierarchical container inside an AD domain. OUs organize user, group, and computer objects, represent administrative responsibilities, and provide targets for Group Policy. They are not separate domains or hard security boundaries; incorrect delegation and policy inheritance can create far-reaching permissions.

How it works and where it fits

Organizational Unit denotes a technical component or operating environment with its own trust boundaries, identities, interfaces, and dependencies. Security is determined not only by the product, but by architecture, configuration, and the way data and privileges cross component boundaries. Management planes and production processing should be considered separately.

Practical security relevance

Secure operation depends on complete inventory, hardened baselines, least privilege, patchability, and centralized telemetry. Changes should be reproducible and reviewable. Exposed interfaces, default access, secrets, and supply-chain dependencies need particular attention; isolation, backup, and recovery must also be exercised in realistic conditions.

  • Active Directory ObjectActive Directory ObjectActive Directory entry representing an identity, resource, or structure through an object class and associated attributes.: Active Directory entry representing an identity, resource, or structure through an object class and associated attributes.
  • Active Directory DomainActive Directory DomainLogical Active Directory partition with a shared directory database, namespace, policies, and domain controllers.: Logical Active Directory partition with a shared directory database, namespace, policies, and domain controllers.
  • Group Policy ObjectGroup Policy ObjectCollection of centrally managed Windows policies for users and computers.: Collection of centrally managed Windows policies for users and computers.
  • Least PrivilegeLeast PrivilegeGrants only the minimum permissions necessary for a specific task and timeframe.: Grants only the minimum permissions necessary for a specific task and timeframe.

Related terms