Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Access denied for move object

Posted on 2010-09-20
4
Medium Priority
?
2,067 Views
Last Modified: 2012-06-22
I have installed Windows server 2003 with 32 bits  , I have delegated access for a group "TIsupport" , with new permission this group can change all object on OUs called Computer-ADM  but don't work , users can't get move the object for other OU, but can disable account machine on OU Computer-ADM . I have set  the permission of OU and all sub-object for  group with all permission, but don't work.. How can solve this problem?


 Thank very much
0
Comment
Question by:aspenbr
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 43

Accepted Solution

by:
Adam Brown earned 1500 total points
ID: 33719386
In order to move objects in AD, users must be given the Delete permission on the OU that they are moving objects from and Write permission on the OU they are moving objects to. Is this how you have it configured?
0
 
LVL 31

Expert Comment

by:Justin Owens
ID: 33719578
abcbrown2010 is correct.  If you only delegated rights for that group to one specific OU, a MOVE would not be allowed, as it requires access to a different OU.  That is by design.  You normally don't want a security group which has delegated rights to OU1 to do anything to OU2.  Thus, you will need someone with higher privileges to make moves when that is necessary.  Inherited permission should allow OU1 delegates to affect sub-OUs of OU1.

Justin
0
 
LVL 1

Author Comment

by:aspenbr
ID: 33769959
Thank very much for new idea . For solve this problem I set permission for each OU and all sub-objects inside OU.

Thank very much
0
 
LVL 1

Author Closing Comment

by:aspenbr
ID: 33769974
The solution is solve my problem
0

Featured Post

Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introducing Priority Question, our latest feature.
It’s time for spooky stories and consuming way too much sugar, including the many treats we’ve whipped for you in the world of tech. Check it out!
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question