The AD administrator would simply move the computer account to the appropriate Organizational Unit once the computer has been joined to the domain. However, one thing you may have noticed is that the default “Computers” container does not allow you to link group policy objects. This could be very limiting especially if your organization’s security policies require that you initially configure the system once it joins the domain, possibly by applying specific policies, installing software, or enabling features such as the local Windows firewall. One solution is to redirect the Computers Container. Prerequisites Note: The “Computers” containers is a system-protected object that cannot be removed. However, the container can be renamed. Redirecting CN=Computers to an Administrator-specified Organizational Unit Note: Redircmp.exe is installed in the %Systemroot%\System32 folder on Windows Server 2003-based or newer computers. When Redircmp.exe is run to redirect the CN=Computers container to an organizational unit that is specified by an administrator, the CN=Computers container will no longer be a protected object. This means that the Computers container can now be moved, deleted, or renamed. If you use ADSIEDIT to view attributes on the CN=Computers container, you will see that the systemflags attribute was changed from -1946157056 to 0. This is by design. Just as a final tip, the same process can be performed to redirect users. The command that would be used is redirusr. Here is a list of all of the “well-known objects” used by earlier-version APIs.
B:32:6227F0AF1FC2410D8E3BB10615BB5B0F:CN=NTDS QuotasB:32:F4BE92A4C777485E878E9421D53087DB:CN=Microsoft,CN=Program DataB:32:09460C08AE1E4A4EA0F64AEE7DAA1E5A:CN=Program DataB:32:22B70C67D56E4EFB91E9300FCA3DC1AA:CN=ForeignSecurityPrincipalsB:32:18E2EA80684F11D2B9AA00C04F79F805:CN=Deleted ObjectsB:32:2FBAC1870ADE11D297C400C04FD8D5CD:CN=InfrastructureB:32:AB8153B7768811D1ADED00C04FD8D5CD:CN=LostAndFoundB:32:AB1D30F3768811D1ADED00C04FD8D5CD:CN=SystemB:32:A361B2FFFFD211D1AA4B00C04FD7D83A:OU=Domain ControllersB:32:AA312825768811D1ADED00C04FD8D5CD:CN=ComputersB:32:A9D1CA15768811D1ADED00C04FD8D5CD:CN=Users
