| Author | Messages | |
AD00000138
Posts:0
 | | 08/25/2005 5:32 AM |
| Would appreciate some directions/assistance in resolving this problem.
We have a couple of users to whom we wish to give permissions to allow
them to createand delete computer accounts and also able to move said
computers between Ous in the AD. Currently we have a security group set
up with the permissions set to Special Permissions and clicking on
Advanced Security Settings set the create/delete computers plus given
them create/delete child objects.
This has still not allowed them to move computers, they can
create/delete computers but not move.
Has anyone any suggestions as to what to try next?
Thanks in advance.
Wallace
********************************DISCLAIMER****************************
The information contained in the above e-mail message or messages
(which includes any attachments) is confidential and may be legally
privileged. It is intended only for the use of the person or entity
to which it is addressed. If you are not the addressee any form of
disclosure, copying, modification, distribution or any action taken
or omitted in reliance on the information is unauthorised. Opinions
contained in the message(s) do not necessarily reflect the opinions
of the Queensland Government and its authorities. If you received
this communication in error, please notify the sender immediately and
delete it from your computer system network.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| listmail
Posts:822
| | 08/25/2005 3:01 AM |
| http://blog.joeware.net/2005/07/17/48/
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Brian Desmond
Sent: Thursday, August 25, 2005 1:40 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: RE: [ActiveDir] Move Computer Permissions
Moving a computer requires the following two steps:
Delete the object from the source OU
Create the object in the destination OU
There is no such thing as a "move" right.
So, given you grant the create right for computer objects in the destination
OU to this group, and the delete right for computer objects in the source
OU.
Thanks,
Brian Desmond
brian@xxxxxxxxxxxxxxxx
c - 312.731.3132
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Mills, Wallace
Sent: Thursday, August 25, 2005 12:32 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] Move Computer Permissions
Would appreciate some directions/assistance in resolving this problem.
We have a couple of users to whom we wish to give permissions to allow them
to createand delete computer accounts and also able to move said computers
between Ous in the AD. Currently we have a security group set up with the
permissions set to Special Permissions and clicking on Advanced Security
Settings set the create/delete computers plus given them create/delete child
objects.
This has still not allowed them to move computers, they can create/delete
computers but not move.
Has anyone any suggestions as to what to try next?
Thanks in advance.
Wallace
********************************DISCLAIMER****************************
The information contained in the above e-mail message or messages (which
includes any attachments) is confidential and may be legally privileged. It
is intended only for the use of the person or entity to which it is
addressed. If you are not the addressee any form of disclosure, copying,
modification, distribution or any action taken or omitted in reliance on the
information is unauthorised. Opinions contained in the message(s) do not
necessarily reflect the opinions of the Queensland Government and its
authorities. If you received this communication in error, please notify the
sender immediately and delete it from your computer system network.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
| bdesmond
Posts:977
| | 08/25/2005 5:40 AM |
| Moving a computer requires the following two steps:
Delete the object from the source OU
Create the object in the destination OU
There is no such thing as a "move" right.
So, given you grant the create right for computer objects in the destination
OU to this group, and the delete right for computer objects in the source
OU.
Thanks,
Brian Desmond
brian@xxxxxxxxxxxxxxxx
c - 312.731.3132
-----Original Message-----
From: ActiveDir-owner@xxxxxxxxxxxxxxxxxx
[mailto:ActiveDir-owner@xxxxxxxxxxxxxxxxxx] On Behalf Of Mills, Wallace
Sent: Thursday, August 25, 2005 12:32 AM
To: ActiveDir@xxxxxxxxxxxxxxxxxx
Subject: [ActiveDir] Move Computer Permissions
Would appreciate some directions/assistance in resolving this problem.
We have a couple of users to whom we wish to give permissions to allow
them to createand delete computer accounts and also able to move said
computers between Ous in the AD. Currently we have a security group set
up with the permissions set to Special Permissions and clicking on
Advanced Security Settings set the create/delete computers plus given
them create/delete child objects.
This has still not allowed them to move computers, they can
create/delete computers but not move.
Has anyone any suggestions as to what to try next?
Thanks in advance.
Wallace
********************************DISCLAIMER****************************
The information contained in the above e-mail message or messages
(which includes any attachments) is confidential and may be legally
privileged. It is intended only for the use of the person or entity
to which it is addressed. If you are not the addressee any form of
disclosure, copying, modification, distribution or any action taken
or omitted in reliance on the information is unauthorised. Opinions
contained in the message(s) do not necessarily reflect the opinions
of the Queensland Government and its authorities. If you received
this communication in error, please notify the sender immediately and
delete it from your computer system network.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ | | | |
|
|