Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >

KB-2867: Moving enrolled mobile device objects to a different Active Directory OU

App Access Service ,   App Gateway Service ,   Mac & PC Management Service ,  

27 February,17 at 03:38 PM

Applies to: Centrify Identity Service


After a mobile object is created in Active Directory during device enrollment, does it have to remain in the OU it was created in or can it be moved to a different OU? 


Objects created in Active Directory from mobile device enrollments will only occur when using Active Directory group policy to manage devices. The mobile device object does not need to remain in the OU where its originally created but moving to a different OU could impact the current group policy applied to the device. The object can be moved to a different OU and even create different policy options if desired. This may be helpful to manage devices that belong to different user groups and different policy options. 

For additional information not covered in this guide or troubleshooting assistance, please review Centrify Online Help or visit the Customer Support Portal at

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.