User,
Not really sure of your question. I assume that you mean a user account
object located in the default Users container vs. a user account object
located in an administratively created OU?
Well, for starters you can apply GPOs to OU's, not Containers. So, for
example, if you wanted to make use of Software Deployment to the user
configuration via GPO you would have to create an OU, place the desired user
account objects in that OU and then create the GPO and 'link it' to that OU
( which is done when you create it - just wanted to make that step clear as
you can create a GPO and then link it to several other OUs ). The same
thing applies to the computer configuration ( say, for example, that this
'software' was WIN2000 Service Pack 4 or WINXP Service Pack SP1a ).
There is also the issue of delegation.
Here are two differences. Please note that a Container is simply a subset
of an Organizational Unit.
HTH,
Cary