I'm not clear whether you mean that a User
should or [b[should not[/b] be linked to many OUs? Certainly your design allows that to happen. If you meant that each User should only be linked to
one OU then the design would be:
tblUsers (pkUserID, Forename,.......
fkOUlID)
Assuming you want the many-to-many that you have, there is no better way to design it. You don't say what DBMS you will be using, but if the data volumes are "massive" then it better be something robust, in which case handling large data volumes will be a piece of cake.
I would never prefix table names with "tbl" personally. Smells of
VB code!