unable to move computer between ou's

  • Thread starter Thread starter dave
  • Start date Start date
D

dave

I am running windows 2000 ad with the latest sp's\patches
I have two OU's
I have created a security group and delegated full
control to both OU's. I have delegated control at the top
level to all them to add computers to the domain
When I try to move a user from one OU to the other its
fine.
When I try to move a computer, it tells me I do not have
rights. But the user has full rights to both Ou's
When I log on as domain admin its fine
so what stupid thing am i missing
arggg
 
Dave,

Be careful with the delegation wizard. It seems real friendly but you get unobvious results. You are getting the error because it is setting permissions on user objects in the OU but not computer objects. If you want to grant FC to all objects in the OU, the easiest and best way is to go to the security tab and add the group/user and grant full control. Then go into the advanced button and find your entry that you just made. Click edit and drop the "apply onto" list down and select to apply to this object and all child objects. That will do the trick.
 
Back
Top