How to configure an OU as default for new objects in Active Directory

Share this:

In this Tutorial we will configure an Organization Unit as new default location for new users. By default, all new objects created by Exchange for example are created under Users container when a location is not specified.

Solution


If we try to to create a new user in Exchange Server 2013 Exchange Admin Center (EAC) and we do not specify the Organization Unit we will have the new user being created on the Users container.

image

 

Prerequisites…

Before changing the default location we must make sure that the domain functional level is at least Windows Server 2003. An easy to find out is asking properties of the domain in the Active Directory Users and Compupters and on the General page the current forest and domain level will be listed.

image5

How to define a new OU  as default location…

The first step is to create a new Organization Unit (OU) and we will label that new OU as InitialOU.

image11

Having the new OU in place, we just need to run the redirusr utility, and the only parameter is the location of the OU (we can copy the value of distinguishedName of the new Organization Unit). The syntax of the command is listed below.

redirusr OU=InitialOU,DC=patricio,dc=local

image

Testing the new location…

An easy way to test is to user the New-ADUser cmdlet. The figure below shows the cmdlet in action.

image

We can also create a new group using New-ADGroup cmdlet.

image

If we go back to Active Directory Users and Computers we should have all new objects in the new Organization Unit that we defined as the default location.

image.

Conclusion


In this Tutorial we demonstrated how to change the default location for new objects in Active Directory.

Written by Anderson Patricio

Anderson Patricio

Anderson Patricio is a Canadian MVP in Cloud and Datacenter Management, and Office Server and Services, besides the Microsoft Award he also holds a Solutions Master (MCSM) in Exchange and several other certifications. Anderson has been contributing to the Microsoft Community with articles, tutorials, blog posts, twitter, forums and book reviews. He is a regular contributor here at ITPROCentral.com, MSExchange.org, Techgenix.com and Anderson Patricio.org (Portuguese).

Related Post

Configuring Tombstone Lifetime (TSL) period By default a tombstone lifetime is 180  days (it used to be 60 days on Windows Server 2003 R2), however we can change for any number that we like or m...
How to add the Active Directory Domain Services ro... In this Tutorial we are going over the process to add the Active Directory Domain Services role on a Windows Server 2012 R2. This procedure will be th...
How to disable all accounts from an Organization U... In some cases, the administrator must disable all accounts from a specific Organization Unit. We can approach this task from either Active Directory U...
How to remove the several Organization Units that ... In some situation an entire structure of Organization Units must be deleted, and by default new OUs are automatic defined to protect them against dele...