Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

How to create an OU under Computers OU

Posted on 2010-08-13
7
Medium Priority
?
5,995 Views
Last Modified: 2012-05-10
How do I create a sub-OU under the the Computers OU within Active Directory 2008?  I do not have the option to create a new OU when I have Computers highlighted.  Also, when I try to move an existing OU to the Computers OU I receve the following error.

Windows cannot move object <object name> because: Access is denied.
0
Comment
Question by:jdouthit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
7 Comments
 
LVL 74

Accepted Solution

by:
Glen Knight earned 500 total points
ID: 33431025
You cannot create OU's under the system containers.

You will have to create a seperate OU under the forest root and create your segregated OU's under there.
0
 
LVL 1

Expert Comment

by:elintseeker2003
ID: 33431093
Do you have permission?
0
 

Author Comment

by:jdouthit
ID: 33431099
When I check the security tab both administrator and domain admins have full rights.
0
Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

 
LVL 43

Assisted Solution

by:Adam Brown
Adam Brown earned 500 total points
ID: 33431824
As Demazter said, you can't create a new OU under the default Computers OU or the default Users OU. This is because Active Directory does not recognize either of these as actual Organizational Units. The reason is that they are LDAP objects that us CN as the identifying portion of their Distinguished name. In order for an Organizational Unit to be allowed to hold other OUs, it has to have an identifying portion of the Distinguished name of OU. So you have to build a new top level OU and put lower level OUs in there.
0
 
LVL 74

Expert Comment

by:Glen Knight
ID: 33431838
The reason is simply because these are Containers and not OU's.  You cannot create OU's under any container.  You will see the icons in Active Directory Users and Computers are slightly different.
0
 
LVL 58

Expert Comment

by:tigermatt
ID: 33431846

demazter is correct and unfortunately, permissions won't make a difference here.

The default Computers and Users containers in the root of the domain are NOT OUs - they are containers - so they cannot have any sub-OUs. Their distinguished name will be CN=Computers,DC=domain,DC=com, whereas a true OU would have OU=Some OU,DC=domain,DC=com. Only a true OU can have a sub-OU.

You will need to create a separate OU structure starting with a new OU under the domain root.

-Matt
0
 
LVL 1

Expert Comment

by:elintseeker2003
ID: 33431866
demazter is correct. You CANNOT create OU's in Containers. However, you can create OU's, within OU's, within OU's. What i suggest is, if you create a new OU, move those PC's out of the COMPUTER container, then you can create your GPO.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question