4.6 Default Active Directory Containers and Password Policy Assignments for Computer Objects

All default containers are present in the domain DN attribute wellknownObjects. Ensure that the nspmPasswordPolicyDN attribute in the domain controllers container (OU=Domain Controllers,DC=example,DC=com) and computers container (CN=Computers,DC=example,DC=com) points to the default password policy (CN=Default Password Policy,CN=Password Polcies,CN=System,DC=example,DC=com). If the computers container is modified, ensure that the default password policy is assigned to it.

Avoid placing or importing users and computers into the same container. Create dedicated containers for computer objects. If computers are imported to multiple containers, ensure that the default password policy is applied to those containers.