unable to move computer between ou's

D

dave

I am running windows 2000 ad with the latest sp's\patches
I have two OU's
I have created a security group and delegated full
control to both OU's. I have delegated control at the top
level to all them to add computers to the domain
When I try to move a user from one OU to the other its
fine.
When I try to move a computer, it tells me I do not have
rights. But the user has full rights to both Ou's
When I log on as domain admin its fine
so what stupid thing am i missing
arggg
 
G

Guest

Dave,

Be careful with the delegation wizard. It seems real friendly but you get unobvious results. You are getting the error because it is setting permissions on user objects in the OU but not computer objects. If you want to grant FC to all objects in the OU, the easiest and best way is to go to the security tab and add the group/user and grant full control. Then go into the advanced button and find your entry that you just made. Click edit and drop the "apply onto" list down and select to apply to this object and all child objects. That will do the trick.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top