Delegate access to Move computer accounts

  • Thread starter Thread starter Dave Woolley
  • Start date Start date
D

Dave Woolley

Hello All,

I've got a container called Workstations that holds all of my computer
accounts and within that container I have 2 sub-containers. I'm
trying to give a co-worker the ability to move computer accounts
around within the Workstations container and the sub-containers.

I first tried using the Delegate Control wizard on the Workstations
container and eventually went so far as to give the person all of the
"common tasks".

When that didn't work, I tried manually applying permissions to the
Workstation container and in looking at the Advanced security it
appears the that person has just about every permission I can grant.

When he tries to Move a computer account, he still gets an
"Insufficient permission" error message. Can anyone help me out and
point me in the right direction?

Thanks in advance for you help!
-Dave
 
You need to set following rights on your OU-s to that person or group:
- Object Tab (This object and all child objects) --> Create/Delete Computer
Objects
- Properties Tab (Computer objects) --> Read/Write Public Information

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000), Windows MVP
(e-mail address removed)
http://ladava.com
 
Back
Top