OUs

OUs can be created and deleted by Active Directory admins. They support delegation of control, using the Delegation of Control Wizard and the built-in tools. Group policy objects and managers can be applied to OUs. OUs can be nested.