Single forest with a single domain

If you have a single forest with a single Default-First-Site domain, you can create the top‑level OU fat the same level as the default containers for Computers, Users, and other top-level objects. This is the simplest implementation of an Active Directory infrastructure. In this scenario, the top-level Centrify OU might look similar to this: