Permissions neccessary to move user objects between OUs

  • Thread starter Thread starter Jason Edelen
  • Start date Start date
J

Jason Edelen

Can anyone tell me what permissions are necessary in order to move a user
object between OUs in active directory? I'm specifically wondering if the
create and delete user objects right is required but I'd appreciate it if
anyone can either enumerate the rights or point me somewhere to find them.
Thanks in any case.
 
In a nutshell, if you want to move items in the DS from one container to
another, you need three permissions:
1) DELETE on the object being moved or DELETE_CHILD on the source container
2) WRITE_PROP on the object being moved for RDN and CN.
3) CREATE_CHILD on the target container

I'd swear Dmitri posted on this very topic once before....ah yes, here it
is.
http://groups.google.com/groups?q=d...=#[email protected]&rnum=1

Ah he noted something I forgot.....be sure to note his #2 with the example
for OU.
 
Back
Top