It may happen that when you install a program you need to create Active Directory Container. In my case this was the System Center 2012 Virtual Machine Manager (SP1). What most people probably think is that they have to create an OU (Organizational Unit), but that is not the case. There are a few differences between an Active Directory Container and an Active Directory OU. The main difference is that Group Policy Objects (GPO) cannot be applied to a container.