There is a big difference between groups and organizational units. Groups are mainly used for permission settings, while organizational units are mainly used for network construction; in addition, organizational units only represent a collection of objects in a single domain (can include group objects), while groups can include users, computers, and shared resources on the local server. , a single domain, a domain tree, or a forest.
Related recommendations: "php Getting Started Tutorial"
The organizational unit is ou, and the group is group; the former is a directory, and the latter is used to set permissions.
Organizational unit is a type of directory object contained in the domain, such as users, computers and groups, files, printers and other resources. It is a container that can deploy group policies on OU
Group in AD can be understood as a permission directory, which specifies some attributes that users have in AD, and can also be understood as a collection of permissions.
Organizational units are a type of directory objects contained in a domain, such as users, computers and groups, files, printers and other resources. is a container. The organizational unit also has a hierarchical structure that can be used to build a hierarchical structure model of the domain, which allows users to minimize the number of domains required for the network (this should be easy to understand, the hierarchical structure of the organizational unit must be larger than The forest is easy to manage). Organizational units have inheritance, and child units can inherit the ACL of the parent unit. At the same time, domain administrators can grant users administrative rights to all organizational units or individual organizational units in the domain. Just like the heads of various departments in a company, equalizing power can lead to more effective management.
The above is the detailed content of What is the difference between group and ou. For more information, please follow other related articles on the PHP Chinese website!