Having used openldap and now getting to know MS active directory (AD), I realize that in AD there is an attribute called "systemPossSuperiors", which defines which objects are allowed as parent objects. Afaik this is not present in openldap. (How is decided which objects are allowed as parents in openldap?)
Can anyone shed some light on this design decision? Does having systemPossSuperiors make AD more robust? Or more flexible? I am just curious about why one would choose to do it this or the other way.