What is the difference between a domain and an OU, and why does IMSS recommend one over the other?
In Active Directory, each domain is responsible for storing and updating its individual domain-directory – which collectively comprise the organization’s Active Directory. In addition, a domain is responsible for authenticating access to all resources that are housed in its domain. In reality, these tasks are accomplished by the Domain Controllers – servers that run Active Directory services. These domain controllers are similar to Windows NT’s Primary Domain Controllers, although the hardware requirements for Active Directory domain controllers are significantly greater than those of NT. In addition, administering and maintaining an Active Directory domain is substantially more challenging and complex than the older, NT-style domain structure. Thus, it can be seen that there is considerable overhead involved in running a domain within Active Directory – in administrative, financial and personnel terms. There are also other, significant, network issues that are involved in running a se
