One really useful tidbit I picked up last week –
Redirusr & redircmp
Configures the default OU for computers and users so they don’t appear in the default containers when they are added (effectively meaning they only get root domain policies).
As you would guess – it helps keep the default AD containers clean by placing machines straight into an OU and also applying any policies attached.