Specifies where user and machine accounts are added to the tree. Can be overriden by and . It also used as the base dn for all ldap searches.