Does protecting an OU prevent the creation of subordinate OUs and users if the create option is disabled in the template?
No, you are still able to create an OU, User or Group under the protected OU, as the application cannot differentiate between an OU, user and group as they are all objects and the template is not configured to prevent the creation of an object within the protected OU.
Does protecting an OU prevent the creation of subordinate OUs and users if the create option is enabled in the template?
Yes, you are unable to create an OU, User or Group under the protected OU, as the application cannot differentiate between an OU, user and group as they are all objects and the template is configured to prevent the creation of an object within the protected OU.