Hi All

IMHO, I think that u can use CN=OU_Name,DC=domain,DC=com and that OU contains all of vCenter admins and users in ur enviroment..
I never tested that, but I think it goes levels down..I.e. if u have another OU inside, its users will be contained..