locked
AD Delegation. Move computers to child OUs RRS feed

  • Question

  • Hello,

    I want my Help Desk users to be able to move computers between OUs and Sub-OUs. I know I can use AD delegation for it but I'm not sure how can I delegate control for all the sub OUs.

    Tuesday, May 19, 2015 12:19 AM

Answers

  • To delegate moving AD objects, you can refer to what I published here: http://social.technet.microsoft.com/wiki/contents/articles/20747.delegate-moving-user-group-and-computer-accounts-between-organizational-units-in-active-directory.aspx

    For sub-OUs, they will inherit the permissions from the root OUs unless if it was blocked. You can, on the root OU, enforce the inheritance of permissions.


    This posting is provided AS IS with no warranties or guarantees , and confers no rights.

    Ahmed MALEK

    My Website Link

    My Linkedin Profile

    My MVP Profile

    • Proposed as answer by Meinolf Weber Tuesday, May 19, 2015 8:45 AM
    • Marked as answer by Mary Dong Monday, May 25, 2015 1:15 AM
    Tuesday, May 19, 2015 7:58 AM