I have two MIS employees that have the rights to add computers to the domain and also rename computers to a computer name that was never used before.
For some reason, they cannot rename a computer name that was already used.
I believe the issue has to do with the containers that the computers are stored in. When a computer first gets added to the domain, it goes to the default AD location Company\Computers.
However, if they try to rename a PC that I have moved to our AD tree: Company\Location\Building\Computers, they get hit with an error. I would have to do it for them.
I believe it's their rights to that container. Any ideas on what I can do to give them the most minimal access to get the job done?
If this doesn't make sense and you would like to see an example, let me know.