Active Directory OU and GPO Map

An Active Directory OU and GPO map records the logical groups that organize devices or users and the policies linked to them. The domain is the starting point, with organizational units below it and policy objects connected to the OUs they affect. A small map can answer the practical audit question: which devices receive which policy? Use clear OU labels based on department, device class, or administration boundary. Show separate policy objects when their scope differs. This is especially useful before changing a baseline, moving computers between OUs, or reviewing the controls assigned to privileged workstations. Keep it focused on policy scope; domain controllers and network hardware belong in an infrastructure topology.

Tipo Diagrama de redeNorma Cisco-convention topology iconsMecanismo schematex-networkAtualizado 24/09/2026

A solicitação

“An Active Directory OU and GPO map for corp.example.com with HR, Engineering, and Admin Devices OUs, baseline policy applied to HR and Engineering, an admin workstation policy applied to Admin Devices, and PCs in each OU.”

Depois, tenteAdd a Finance OU with the baseline policy.Add a separate password policy for admin workstations.

O que há neste desenho

Entenda as decisões por trás dele.

01Baseline policy

Shared controls are linked to the standard user OUs.

02Dedicated admin policy

Privileged devices receive a separate policy path.

03Department OUs

The groups make policy scope easy to review.

Use this logical view for policy audits and change reviews, not for switch ports or physical cabling.

Ver todos os modelos de diagrama de rede →

Perguntas frequentes

Dúvidas comuns

What is an organizational unit?

An OU is a logical container in Active Directory used to organize objects and delegate administration or apply Group Policy.

What is a GPO link?

A Group Policy Object link associates a policy with a site, domain, or OU so eligible objects in that scope can receive its settings.

Why map GPO scope?

A map makes overlapping or missing policy coverage easier to spot during a review.