An organizational unit (OU) is a container in Active Directory (AD) for storing objects such as accounts, groups, and other OUs. Organizing accounts into OUs allows for easier administration and makes it possible to delegate administrative tasks including storage allotments.

One important idea to keep in mind when using OUs: They are not security principles. This means that they cannot be used to secure resources.