I'm creating some AD LDS objects. In AD I'm prompted with this window.
What's the difference between 'container' and 'group'? Is there a web resource that lists the difference? I haven't been able to find one yet.
The 'container' class is for AD folders that aren't OUs, e.g. the automatically created 'Users' folder. the 'group' class is for Security or Distribution groups that can have users, computers, or other groups as members.
An object being inside a container affects it's DN. If I put a user with a CN of 'jdoe' in the 'Users' folder, it's DN will be 'CN=jdoe,CN=Users,DC=domain,DC=com'. If 'jdoe' becomes a member of a 'group', that would not change his DN.
The Active Directory Schema documentation should have everything you need.
The container object has the following definition:
The group object has the following definition: