Organizational Units (OUs) are containers in Active Directory. OUs can contain user accounts, groups, computer accounts, and other OUs. An object can be included in only one OU.
When you expand the Active Directory node in the Active Roles console, the console tree displays icons representing domains. You can double-click a domain icon to see containers that are defined in the domain. OUs are marked with the following icon: 
When you select an OU in the console tree, the details pane lists objects included in the OU, and the Action menu provides commands to create new objects in the OU, search for objects in the OU, and manage OU properties.
The following section guides you through the Active Roles console to manage Organizational Units. You can also use the Active Roles Web Interface to perform management tasks on Organizational Units.
You can create an OU as follows: in the console tree, right-click the domain or another OU, select New | Organizational Unit, and then follow the instructions in the wizard.
On the first page of the wizard, type the name for the new OU in the Name box. If necessary, select or clear the Protect container from accidental deletion check box. Click Next and then click Finish to complete the operation.
By selecting the Protect container from accidental deletion check box you ensure that the newly created OU cannot be deleted, whether using Active Roles or other tools for Active Directory administration. When somebody attempts to delete an OU for which this check box is selected, the operation returns an error indicating that access is denied. For an existing OU, you can view or change this setting on the Object tab in the Properties dialog box.
