A container within Active Directory service that should be used to reflect the details of the organization’s business structure or to delegate administrative control over smaller groups of users, groups, and resources. An organizational unit (OU) inherits security policies from the parent domain and parent OU unless it is specifically disabled.