I've got a question for you SMB folks that run AD. I'm not sure how
best to define SMB, so let's say for the purposes of what I'm trying to
find out that's maybe 500 or fewer users.

When working with users and groups, do you typically just use the
default groups like Domain Users and Domain Admins? If you create your
own groups, do you just stick them in the default Users container? Or
do you go so far as to create your own OUs and create groups there?

Does this washcloth smell like chloroform?