How to create an OU under Computers OU

How do I create a sub-OU under the the Computers OU within Active Directory 2008?  I do not have the option to create a new OU when I have Computers highlighted.  Also, when I try to move an existing OU to the Computers OU I receve the following error.

Windows cannot move object <object name> because: Access is denied.
jdouthitAsked:
Who is Participating?
 
Glen KnightConnect With a Mentor Commented:
You cannot create OU's under the system containers.

You will have to create a seperate OU under the forest root and create your segregated OU's under there.
0
 
elintseeker2003Commented:
Do you have permission?
0
 
jdouthitAuthor Commented:
When I check the security tab both administrator and domain admins have full rights.
0
Free tool for managing users' photos in Office 365

Easily upload multiple users’ photos to Office 365. Manage them with an intuitive GUI and use handy built-in cropping and resizing options. Link photos with users based on Azure AD attributes. Free tool!

 
Adam BrownConnect With a Mentor Sr Solutions ArchitectCommented:
As Demazter said, you can't create a new OU under the default Computers OU or the default Users OU. This is because Active Directory does not recognize either of these as actual Organizational Units. The reason is that they are LDAP objects that us CN as the identifying portion of their Distinguished name. In order for an Organizational Unit to be allowed to hold other OUs, it has to have an identifying portion of the Distinguished name of OU. So you have to build a new top level OU and put lower level OUs in there.
0
 
Glen KnightCommented:
The reason is simply because these are Containers and not OU's.  You cannot create OU's under any container.  You will see the icons in Active Directory Users and Computers are slightly different.
0
 
tigermattCommented:

demazter is correct and unfortunately, permissions won't make a difference here.

The default Computers and Users containers in the root of the domain are NOT OUs - they are containers - so they cannot have any sub-OUs. Their distinguished name will be CN=Computers,DC=domain,DC=com, whereas a true OU would have OU=Some OU,DC=domain,DC=com. Only a true OU can have a sub-OU.

You will need to create a separate OU structure starting with a new OU under the domain root.

-Matt
0
 
elintseeker2003Commented:
demazter is correct. You CANNOT create OU's in Containers. However, you can create OU's, within OU's, within OU's. What i suggest is, if you create a new OU, move those PC's out of the COMPUTER container, then you can create your GPO.
0
All Courses

From novice to tech pro — start learning today.