An organizational nit is the smallest scope or unit to which you can assign Group Policy settings or delegate administrative authority. Using organizational units, you can create containers within a domain that represent the hierarchical, logical structures within your organization. You can then manage the configuration and use of accounts and resources based on your organizational model (techno, 2005). With the users assigned to group accounts or Ox's, you can use to assign a setoffs permissions and rights to multiple users simultaneously, along with making any hangers that are needed to Individual users.
Computer accounts provide a means for authenticating and addling computer access to the network and to domain resources. Each computer account must be unique. Once the conversion has taken place, the local users on the client computer will not be affected during domain Join. They can still logon on the local machine.
Meanwhile, on domain controllers, during the Active Directory Installation, local accounts in the registry-based SAM database are migrated to Active Directory; the existing SAM IsWithin the AD policy, the adman can adjust different polices that allows for users to have different access while on the same network, but also have different controls at different local machines. This is done by security polices and group polices. Once the user has been authenticated, the user is authorized or denied access to domain resources based on the explicit permissions assigned to that user on the resource Administrators can use access control to manage user access to shared resources for security purposes.