OUs can be used to delegate the administration of a set of objects to individuals or groups. These individuals have control over managing objects in that OU, under the privileges defined by the Domain Admins or Enterprise Admins. Later on in this chapter, we will look into the configuration steps.