ccorino1
asked on
Do Not Have Rights to Rename Computer Name
I have two MIS employees that have the rights to add computers to the domain and also rename computers to a computer name that was never used before.
For some reason, they cannot rename a computer name that was already used.
I believe the issue has to do with the containers that the computers are stored in. When a computer first gets added to the domain, it goes to the default AD location Company\Computers.
However, if they try to rename a PC that I have moved to our AD tree: Company\Location\Building\
I believe it's their rights to that container. Any ideas on what I can do to give them the most minimal access to get the job done?
If this doesn't make sense and you would like to see an example, let me know.
For some reason, they cannot rename a computer name that was already used.
I believe the issue has to do with the containers that the computers are stored in. When a computer first gets added to the domain, it goes to the default AD location Company\Computers.
However, if they try to rename a PC that I have moved to our AD tree: Company\Location\Building\
I believe it's their rights to that container. Any ideas on what I can do to give them the most minimal access to get the job done?
If this doesn't make sense and you would like to see an example, let me know.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Also, as far as permissions. What should I use there?
There are a TON of permissions.
There are a TON of permissions.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
That should do it.
What error is displayed?
If you serch active directory, is the computer name still there? Is so delete, wait for replication and try again. If no, are the admins domain administrators?
If you serch active directory, is the computer name still there? Is so delete, wait for replication and try again. If no, are the admins domain administrators?
ASKER
Thank you all for your help. I resolved the issue with the article I found thanks to d3ath5tar and rpassero!
ASKER
The article I posted seems to have a nice walkthrough of my exact issue.
ASKER
I am creating a custom delegation. Would it be "Computer Objects"? And they would need "Create selected objects in this folder" as well as "delete selected objects in this folder"?