Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

AD delegated rights unable to move computer

Posted on 2014-07-24
1
Medium Priority
?
338 Views
Last Modified: 2014-08-11
I am trying to delegate rights to our Helpdesk staff and contract vendors.  I am unable to to figure out how to give them rights to move computer accounts between OUs.  I have followed this procedure: MS KB 818091.  

I am running:  DCs on W2k8r2, and client is running W7

I am at a complete loss...any ideas?
0
Comment
Question by:kevin_buchanan
1 Comment
 
LVL 14

Accepted Solution

by:
Justin Yeung earned 2000 total points
ID: 40218552
basically give them (a group or individual user) "delete computer object" rights on the source OU and grant them "create computer object" rights on the destination OU.

on 2008 server or above, you can actually run delegation wizard without manually setup the permission.

example
http://kpytko.pl/2012/05/16/active-directory-rights-delegation-overview/

btw, the kb that you posted is for 2000 servers.
0

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Compliance and data security require steps be taken to prevent unauthorized users from copying data.  Here's one method to prevent data theft via USB drives (and writable optical media).
Scripts are great for performing batch jobs against users, however sometimes the GUI is all you need.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

579 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question