The DNs of the containers for users, ES user groups, and ES resources, if you are going to use something other than the default values. ES groups and resources are used only by ES, so we recommend you use the defaults (located in "CN=Micro Focus,CN=Program Data") for their containers. If you are using the Micro Focus user class (microfocus-MFDS-User), you can use the default ES user container ("CN=Enterprise Server Users,CN=Micro Focus,CN=Program Data", below the domain-DN) as well. On the other hand, if you want to let existing Windows users sign on to ES without creating separate ES user accounts for them, you will need to configure ES to use your existing user container in AD (usually "CN=Users"). Use that for your user container (shown as user-container below) in the following commands as well.