Link to home
Start Free TrialLog in
Avatar of jdouthit
jdouthitFlag for United States of America

asked on

How to create an OU under Computers OU

How do I create a sub-OU under the the Computers OU within Active Directory 2008?  I do not have the option to create a new OU when I have Computers highlighted.  Also, when I try to move an existing OU to the Computers OU I receve the following error.

Windows cannot move object <object name> because: Access is denied.
ASKER CERTIFIED SOLUTION
Avatar of Glen Knight
Glen Knight
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of elintseeker2003
elintseeker2003

Do you have permission?
Avatar of jdouthit

ASKER

When I check the security tab both administrator and domain admins have full rights.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
The reason is simply because these are Containers and not OU's.  You cannot create OU's under any container.  You will see the icons in Active Directory Users and Computers are slightly different.

demazter is correct and unfortunately, permissions won't make a difference here.

The default Computers and Users containers in the root of the domain are NOT OUs - they are containers - so they cannot have any sub-OUs. Their distinguished name will be CN=Computers,DC=domain,DC=com, whereas a true OU would have OU=Some OU,DC=domain,DC=com. Only a true OU can have a sub-OU.

You will need to create a separate OU structure starting with a new OU under the domain root.

-Matt
demazter is correct. You CANNOT create OU's in Containers. However, you can create OU's, within OU's, within OU's. What i suggest is, if you create a new OU, move those PC's out of the COMPUTER container, then you can create your GPO.