OU Structure in W2K03 AD
PDF version
Essentially, OUs have two main uses:
- To allow subadministrators control over a selection of users, computers, or other objects—These are typically non-domain administrators who have been delegated administrative rights for a specific OU without being granted permissions over the whole domain. Conversely, user accounts and groups with elevated permissions, such as service accounts, can be placed in an OU that has tighter access permissions to make changes than do general user accounts.
- To control desktop systems through the use of Group Policy objects (GPOs) associated with an OU.
This article from InformIT includes the following info: