• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1745
  • Last Modified:

Delegate control of 'Computer' Object

I have an admin that's not ready to be a domain admin of our AD evirnoment but I would like to grant him permissions to move computers from the default 'Computers' container to my workstations OU. Can someone tell me how I can acheive this? I tried the Deleagte control function but I was weary which permissions should be granted from that menu.
1 Solution
You can give this a try:

On each OU, Computers and Workstations OU:

Delegate Control Wizzard

Select User, perferrably a group

Create a custom task to delegate

Only the following objects in the folder

Computer Ojects

Check Create and Delete selected objects in this folder

Select Full Control

Hi there,

as per http://www.microsoft.com/resources/documentation/Windows/2000/server/reskit/en-us/Default.asp?url=/resources/documentation/Windows/2000/server/reskit/en-us/deploy/dgbd_ads_aimb.asp:

To move an object between two OUs, the administrator performing the move must have the ability to create the object in the destination container and to delete the object from the source container.

SANG501Author Commented:

Thanks Katherine!

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now