Getting ready

To modify the default location for new user objects and computer objects, the Active Directory environment needs to run the Windows Server 2003 domain functional level (DFL). If you try to modify the location in an Active Directory environment running the Windows 2000 Server DFL, you will receive the following error:

Error, unable to modify the wellKnownObjects attribute. Verify that the domain functional level of the domain is at least Windows Server 2003: 
 
Unwilling To Perform
 
Redirection was NOT successful.

Additionally, you need to be signed in interactively with a user object that is a member of the Domain Admins group on a domain controller. This action cannot be performed remotely from a management workstation or management server.