How to enable container option using ADSIT Edit tool

 How to enable container option using ADSIT Edit tool

You need to create Active Directory Container. In this case the most people probably thinking is that they have to create an OU (Organizational Unit), but that is not the case.

There are a few differences between an Active Directory Container and an Active Directory OU. The main difference is that Group Policy Objects (GPO) cannot be applied to a container.

The Active Directory Users and Computers program will not give the option the create Container objects by default (right click, new). But with the following procedure, you can enable this. (You have to be member of the “Schema Admins” security group)

Open “Adsiedit.msc”, richt click “ADSI Edit” and click on “Connect to…”

 Select “Schema” by “Select a well known Naming Context” and press the “OK” button

 

In the left plane select “Schema,CN=Configuration,DC=domain,DC=lan” and look in the right plane for “CN=Container”. Open its properties.

 Change the value of “defaultHidingValue” to “FALSE” and press the “OK” button.

 Open the Active Directory Users and Computers program (check if Advanced Features are visible), right click on the domain name or any Container/OU and select the “New” option. The Container option is now also listed in the list of objects.

 It’s done.