I checked and they do have this permission. Also, they create users in the
target OU's with no problems, so wouldn't that indicate they have this
permission?
The account operators group will need the "create user object" permission on
the OU that they are moving the user to. When you move a user it is
creating the user in the OU that you are moving it to.
Tim Hines, MCSA, MCSE (2000 & NT4)
MVP - Active Directory
----- Original Message -----
From: "David Adner" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, October 17, 2002 5:51 PM
Subject: [ActiveDir] Account Operators can't move users
> We added some users to the Account Operators group in our AD domain so
they
> could manage accounts and that's it. One of the tasks they need to do is
> move users between OU's. When they try this, they get a message stating
> they aren't allowed.
>
> I looked at the permissions of the OU's and don't see a "move user"
> permission. They have Create/Delete users, so I'm not sure why they can't
> move them.
>
> Any help is appreciated.
>
>
>
> --
> David
>
> List info : http://www.activedir.org/mail_list.htm
> List FAQ : http://www.activedir.org/list_faq.htm
> List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
--
David
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
