This article describes the options for moving enrolled mobile devices between OU's in Active Directory.
Applies to: Centrify Identity Service
After a mobile object is created in Active Directory during device enrollment, does it have to remain in the OU it was created in or can it be moved to a different OU?
Objects created in Active Directory from mobile device enrollments will only occur when using Active Directory group policy to manage devices. The mobile device object does not need to remain in the OU where its originally created but moving to a different OU could impact the current group policy applied to the device. The object can be moved to a different OU and even create different policy options if desired. This may be helpful to manage devices that belong to different user groups and different policy options.