What is true about the container CN=Users in an Active Directory LDAP tree?

CN=Users Container:

GPOs:Group Policy Objects (GPOs) cannot be linked to this container because it is not an Organizational Unit (OU). GPOs can only be applied to OUs.

Default Location:New users are created in theCN=Userscontainer by default when using standard Active Directory tools unless specified otherwise.

Other Options:

Users outside this container can log in.

The container can contain both user objects and user groups.

Users created here do not need to be moved to log in.

References

Active Directory Containers and OUs