Thursday, November 3, 2016

ADUC: Delegate permissions to move Computer accounts between OUs

In ADUC, right-click OU 1 and select "Delegate Control".

Type in a user or group name and click "Next"

Select the "Create a custom task to delegate" option and click "Next".

Select "Only the following objects in the folder", browse to "Computer objects" in the list and check the box. Also check the boxes for "Create selected objects in this folder" and "Delete selected objects in this folder" and click "Next".

Check the box for "Write", click "Next" and "Finish".

Just do the same steps on OU 2.

No comments:

Post a Comment