When you first implemented it yes there is only one O U.
The domain controllers.
Oh you you must create any other o use you can create organizational units by using graphical tools
such as Active Directory.
Use our recent computers or Active Directory administrative center.
You can also create organizational units by using command line tools such as Windows power cell.
You must create all new or used by using an administrative tool.
There is no mechanism to copy existing or use to create new ones.
Also consider accidental deletion accidental deletion is one of the major causes of Active Directory
recoveries.
Therefore Windows Server 2016 supports the protect o use from accidental deletion feature so organizational
units have protection from accidental deletion share of the following benefits one administrators can
not accidentally delete or use if they want to delete an oh you intentionally they must remove the protection
prior to delete it they owe you.
Second administrators cannot accidentally move or use and third or use that you have newly created by
use an active directory administrative center or Active Directory.
Users and Computers and Windows Server 2000 8 or newer have automatic protection against accidental
deletion.
You can enable or disable the protection from accidental deletion in Active Directory administrative
center in the proper text dialog box of the O.
You can also use Active Directory Users and Computers to enable or disable the protection from accidental
deletion on the object tab and the O you properties dialog box.
Please note that you must enable the advanced view in Active Directory user and computers before you
can see the object tab in the all you properties dialog box.
You can also use Windows power shell to enable or disable protection.
For example you can search for or use that are not protected and enable protection with the following
command.
Get a organizational unit filter asterisk properties protected from accidental deletion by there.
Find all the objects with the following property protected from accidental deletion equal into false
and then set the results to send the results to set organizational unit was protected from accidental
deletion parameter switched on or recoil into Drew.
This will find told that objects and to enable the protection.
Some words about moving objects between 0 use as job role changes or computers are reassigned.
You will need to move objects and edit s to different or use moving objects between 0 using the same
domain is a simple task you can right click the object and select move and then select the new location.
Or you can click and drag the object to the new or you moving objects have the fallen effects on the
objects permissions permissions assigned directly to the object remain in place after the object moves
and the object will inherit new permissions from its new or you and will loose an inherited permissions
from the from the previous.
So you the following permissions are required to move to the s object duly child permission on the source
or or you or delete permission of the object that you are more than you'll also need right proper permission
on the object for the relative distributed name distinguished name and common name and you'll.
Create child permission on the target all you.