http://ssailyang.iteye.com/blog/413518
Turn from: http://stevenit.bokee.com/viewdiary.30578007.html
Although many people will use dsadd and other commands to add users, but dsadd instructions inside does not involve the meaning of Dc,cn,ou, many people do not understand, here is Microsoft's technical support staff's reply, hope to help.
CN, OU, DC are the distinguished names in the end strings of the LDAP connection server (DN, distinguished name)
The connection string format for the LDAP connection server is: LDAP://SERVERNAME/DN
Where the DN has three attributes, respectively, is CN,OU,DC
LDAP is a communication protocol, as HTTP is a protocol.
In the LDAP directory,
DC (Domain Component) CN (Common Name) OU (organizational unit)
An LDAP directory is similar to a file system directory.
The following directories:
Dc=redmond,dc=wa,dc=microsoft,dc=com
If we compare the file system, it can be considered as the following file path:
Com\microsoft\wa\redmond
For example: cn=test,ou=developer,dc=domainname,dc=com
In the code above, Cn=test may represent a user name, Ou=developer represents an organizational unit in Active Directory. The meaning of this sentence may be that the test object is in the Developer organizational unit of the domainname.com domain.