Moving Computer Objects between OUs

Discussion in 'Active Directory' started by Bgt, Jun 2, 2004.

  1. Bgt

    Bgt Guest

    I have delegated the ability to create Computer objects
    to a special Help Desk Group. While the user can add PCs
    to the domain, they can not move PCs from the "Computers"
    folder to an OU.

    Any help would be appreciated.


    Thanks

    Brad
     
    Bgt, Jun 2, 2004
    #1
    1. Advertisements

  2. What permissions do the users in question have on the computers container as
    well?
    In order to perform the move the help desk 'folk will need some perms on the
    source as well as destination locations.

    In a nutshell, if you want to move items in the DS from one container to
    another, you need three permissions:
    1) DELETE on the object being moved or DELETE_CHILD on the source container
    2) WRITE_PROP on the object being moved for RDN and CN.
    3) CREATE_CHILD on the target container

    I'd swear Dmitri posted on this very topic once before....ah yes, here it
    is.
    http://groups.google.com/groups?q=d...=#&rnum=1

    Ah he noted something I forgot.....be sure to note his #2 with the example
    for OU.

    ~Eric
     
    Eric Fleischman [MSFT], Jun 2, 2004
    #2
    1. Advertisements

  3. Bgt

    Dave Clark Guest

    What is the WRITE_PROP right? I am a little confused on
    some terminolgy.
     
    Dave Clark, Jun 2, 2004
    #3
  4. Write property. In ACL UI, it looks like "write name" and "write common
    name" in Properties tab in ACE editor.

    --
    Dmitri Gavrilov
    SDE, Active Directory Core

    This posting is provided "AS IS" with no warranties, and confers no rights.
    Use of included script samples are subject to the terms specified at
    http://www.microsoft.com/info/cpyright.htm

     
    Dmitri Gavrilov [MSFT], Jun 2, 2004
    #4
  5. that would be write property in the UI I believe. And you'd want write on
    the attributes I cited.

    --
    Eric Fleischman [MSFT]
    This posting is provided "AS IS" with no warranties, and confers no rights
    Use of included script samples are subject to the terms specified at
    http://www.microsoft.com/info/cpyright.htm


     
    Eric Fleischman [MSFT], Jun 2, 2004
    #5
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.