[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 429
  • Last Modified:

After moving domain controller (DC1) to another ou (ou1) inside (domain controllers ou) then i canot move DC1 back to the (domain controllers ou) access denied

After moving domain controller (DC1) to another ou (ou1) inside (domain controllers ou) then i canot move DC1 back to the (domain controllers ou) access denied
0
hahh1
Asked:
hahh1
  • 6
  • 3
2 Solutions
 
blamethenetworkCommented:
Are you logging in as the Administrator account?  or a domain administrator?  I think this requires the built-in administrator account.
0
 
hahh1Author Commented:
llogging in with built-in administrator account schema admin domain admins enterprice admin
0
 
blamethenetworkCommented:
can you delete the ad object?
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
hahh1Author Commented:
i;m already llogging in with built-in administrator account schema admin domain admins enterprice admin
yes i can delete any ad object
0
 
hahh1Author Commented:
any update
0
 
blamethenetworkCommented:
Delete the object and re-create it in correct OU.  Server will need rebooted.
0
 
hahh1Author Commented:
is it safe the opject is a domain controller
0
 
hahh1Author Commented:
 
Dear all
 
i discovered the problem nowmay be this will help some one one day
i discovered that some one put deny permissopn for aministrators on the domain controllers ou for the followings create computer opject deny and delete computer opject deny just i make them allow every thing working fine
i must take the points to myself i send two weeks to find this
0
 
hahh1Author Commented:
Dear all
 
i discovered the problem nowmay be this will help some one one day
i discovered that some one put deny permissopn for aministrators on the domain controllers ou for the followings create computer opject deny and delete computer opject deny just i make them allow every thing working fine
i must take the points to myself i send two weeks to find this
0

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

  • 6
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now