Organizational unit criterion
Organizational unit criterion is specified for the domain the management server is currently in, as follows: OU=OU1
Select an organizational unit from the Active Directory tree by clicking Browse, or typing it manually. If the domain access credentials were not specified in the management server options, the program will ask you to provide them. The credentials will be saved in the Domain access credentials option.
For example, suppose that the domain us.corp.example.com has OU1 (which is in the root), OU1 has OU2, and OU2 has OU3. And you need to add the machines of OU3. So, the criterion will be: OU=OU3, OU=OU2, OU=OU1
If OU3 has child containers and you also need to add the machines of those containers to the group, select the Include child containers check box.