AD Delegate Move Computer object

Can someone please direct me to a definitive URL (preferably MS) that states
what rights are required to delegate AD control to a Windows group to be able
to move computer objects between OU's.

I’ve found a few myself, but they all mention different rights.

Cheers,
Cosmo

Howdie!

On 21.04.2010 12:17, Cosmo wrote:
> Can someone please direct me to a definitive URL (preferably MS) that states
> what rights are required to delegate AD control to a Windows group to be able
> to move computer objects between OU's.

A move of an object from one location to another requires two
privileges: a delete/remove priv on the source object and a create priv
at the target. Not sure if there's a MS doc out there on this really.

Cheers,
Florian

If you are setting up delegation, check out an article ny Jorge at:
http://blogs.dirteam.com/blogs/jorge...01/05/369.aspx

--
Paul Bergson
MVP - Directory Services
MCITP - Enterprise Administrator
MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
2008, Vista, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewGroups. This
posting is provided "AS IS" with no warranties and confers no rights.
"Cosmo" <> wrote in message
news:5019D344-E3B9-418D-81ED-...
> Can someone please direct me to a definitive URL (preferably MS) that
> states
> what rights are required to delegate AD control to a Windows group to be
> able
> to move computer objects between OU's.
>
> I've found a few myself, but they all mention different rights.
>
> Cheers,
> Cosmo

Thank you for your responses, as they worked :-)