What is the difference between a child and a descendant?

Descendant is child of child of child and so on. Child is only of that specific element.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Yes they do, most AD objects can have child objects, which objects is controlled by the PossibleInferiors attribute of the ClassSchema for the object.

These lists are based on base Windows 2016 schema, Exchange, Skype, and other schema extensions can add more objects.

Computer objects

Group objects

User Objects

OrganizationalUnit Objects

Do computer / group / user objects have childs or descendants? And if which? Or only organizational units?

Hello

Thank you for your question and reaching out. I can understand you are having query related to AD objects.

When granting permission to an object, you have the option of granting it to all of its child objects, just a few, or the object itself. For instance, your organization's organizational unit (OU) comprises a number of user objects and group objects that represent its employees and departments, as well as a number of computer objects that are assigned to interns who work there. You can configure the permission and select Descendant group objects in the Applies to section to grant the 'Delete child objects' permission to everyone in the OU but the interns. This will make sure that only the groups inside the OU—and not the machines outside the groups—are granted authority to delete child items.

--------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--