What is a key benefit of using Organizational Units (OUs) in Active Directory?

• A. They allow for a flat structure with no hierarchies
• B. Changing the OU structure is difficult
• C. They can be used to hide Active Directory objects
• D. OUs can contain only users

Answer: (C)

Using Organizational Units (OUs) in Active Directory provides several key benefits, with the ability to manage and delegate control over Active Directory objects being one of the most significant. One notable aspect of OUs is that they can help organize and categorize objects, such as users, computers, and groups, in a hierarchical manner.

The correct answer highlights that OUs can be utilized to effectively manage visibility and accessibility of various objects within Active Directory. By organizing objects into OUs, administrators can implement specific policies and permissions that apply to those units, potentially limiting what users can see or access. This organizational structure helps streamline administrative tasks and enhances security by creating boundaries for various segments of the directory.

For context, the other options present misconceptions about the functionalities of OUs. A flat structure without hierarchies contradicts the purpose of OUs, which are designed to create a structured hierarchy. The complexity involved in changing the OU structure varies depending on the organization's needs; however, OUs are generally intended to be flexible to accommodate changes. Lastly, OUs are not restricted to just users; they can contain a variety of objects, including computers, groups, and other OUs, which showcases their versatile use in Active Directory management.