The account operators group will need the "create user object" permission on the OU that they are moving the user to. When you move a user it is creating the user in the OU that you are moving it to.
Tim Hines, MCSA, MCSE (2000 & NT4) MVP - Active Directory ----- Original Message ----- From: "David Adner" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, October 17, 2002 5:51 PM Subject: [ActiveDir] Account Operators can't move users > We added some users to the Account Operators group in our AD domain so they > could manage accounts and that's it. One of the tasks they need to do is > move users between OU's. When they try this, they get a message stating > they aren't allowed. > > I looked at the permissions of the OU's and don't see a "move user" > permission. They have Create/Delete users, so I'm not sure why they can't > move them. > > Any help is appreciated. > > > > -- > David > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
