Permissions neccessary to move user objects between OUs

[Jason Edelen]

Can anyone tell me what permissions are necessary in order to move a user
object between OUs in active directory? I'm specifically wondering if the
create and delete user objects right is required but I'd appreciate it if
anyone can either enumerate the rights or point me somewhere to find them.
Thanks in any case.

 

[Joe Richards [MVP]]

In a nutshell, if you want to move items in the DS from one container to
another, you need three permissions:
1) DELETE on the object being moved or DELETE_CHILD on the source container
2) WRITE_PROP on the object being moved for RDN and CN.
3) CREATE_CHILD on the target container

I'd swear Dmitri posted on this very topic once before....ah yes, here it
is.
http://groups.google.com/groups?q=d...=#[email protected]&rnum=1

Ah he noted something I forgot.....be sure to note his #2 with the example
for OU.