Multiple organizational units

Your AD server might have multiple organizational units defined, with each containing a set of users.

Most Windows AD users are defined in the cn=users,... subtree, but some may be defined elsewhere. The AIX multiple base DN feature can be used for such an AD server. For more information, see Multiple base DN support.