Add an Organizational Unit to the Directory
Applies To: Windows Server 2008
To keep your Active Directory Lightweight Directory Services (AD LDS) users and groups organized, you may want to place users and groups in organizational units (OUs). In Active Directory Domain Services (AD DS) and in AD LDS, as well as in other Lightweight Directory Access Protocol (LDAP)-based directories, OUs are the most commonly used method for keeping users and groups organized.
Membership in the Administrators group of the AD LDS instance is the minimum required to complete this procedure. By default, the security principal that you specify as the AD LDS administrator during AD LDS setup becomes a member of the Administrators group in the configuration partition.
To add an OU to the directory
To open Active Directory Service Interfaces (ADSI) Edit, on a computer with the AD LDS server role installed, click Start, click Administrative Tools, and then click ADSI Edit.
Connect and bind to the directory partition of the AD LDS instance to which you want to add an OU. For more information, see Manage an AD LDS Instance Using ADSI Edit.
In the console tree, double-click the directory partition, right-click the container to which you want to add the OU, point to New, and then click Object.
In Select a class, click organizationalUnit, and then click Next.
In Value, type a name for the new OU, and then click Next.
If you want to set values for additional attributes, click More attributes.
After you set all desired attributes for the new OU, click Finish.
Note
By default, OUs can be added only under OU (OU=), country/region (C=), organization (O=), or domain-DNS (DC=) object classes. For example, you can add an OU to o=Microsoft,c=US. You cannot add an OU to cn=test,o=Microsoft,c=US. You can, however, update the schema definition of the OU object class to allow other superior object classes.