Active Directory Security Features
Organization Units (OU) to organize the directory name space
- Users, groups, computers in separate containers
Directory object security
- Per property access control
- Per property auditing
Delegation of administration
- Who can create, manage users, groups, computer accounts, other objects