Active Directory OU and GPO Map

An Active Directory OU and GPO map records the logical groups that organize devices or users and the policies linked to them. The domain is the starting point, with organizational units below it and policy objects connected to the OUs they affect. A small map can answer the practical audit question: which devices receive which policy? Use clear OU labels based on department, device class, or administration boundary. Show separate policy objects when their scope differs. This is especially useful before changing a baseline, moving computers between OUs, or reviewing the controls assigned to privileged workstations. Keep it focused on policy scope; domain controllers and network hardware belong in an infrastructure topology.