Active Directory OU access rights

What rights (security permissions) do I give a OU if I only want to give a user the ability to move objects to that OU?
victor2008Asked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
Krzysztof PytkoConnect With a Mentor Active Directory EngineerCommented:
Open ADUC console as Domain Administrator, click right mouse button on desired OU and choose "Delegation Wizard". Then add user or group you want to allow moving computers and select

"Create custom task to delegate"
"Only the following objects in the folder"
from the list select "Computer objects" and allow create (if they have to only move computers to that OU) and delete (if they have to move computers from that OU somewhere else)

on another screen, from the list choose "Read" and "Write" permissions. That's all

Regards,
Krzysztof
0
 
RickSheikhCommented:
0
All Courses

From novice to tech pro — start learning today.