Automatically placing users and computers in a container other than the default

For as long as I can remember (and I've been a sysadmin since before Windows NT 4) Microsoft has placed newly created computer accounts in the Computers container in Active Directory by default. In smaller shops no one cares, but when you start using group policy to alter a computer's default behavior, it's always been a little annoying to me to have to move the computer out of its default container.

This becomes more of an issue if you have delegated AD administration of certain OUs to others. Containers after all cant have their security delegated the way OUs can. If a computer account hasn't been moved it can create situations where tier 1 support can't take care of tickets it otherwise would be able to do.

It turns out that we've had the ability to change this for some time. Rather than blather on about how, I'll just point you to this rather old Microsoft Support article.

Redirecting the users and computers containers in Active Directory domains