[ActiveDir] Moving user accounts.
I am I correct that to delegate moving user accounts from OU to OU I will have to allow them the ability to delete accounts. It appears accounts work similar to documents, a move is really a copy then delete.
RE: [ActiveDir] Moving user accounts.
Hi Jim, Yes, I have found this to be true...there is no "move object" delegation.We have to use the create and delete. I wonder if that will change in future (I have a feeling it's been mentioned here several times before, but can't remember). -DaveC From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kennedy, JimSent: Wednesday, August 30, 2006 3:17 PMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] Moving user accounts. I am I correct that to delegate moving user accounts from OU to OU I will have to allow them the ability to delete accounts. It appears accounts work similar to documents, a move is really a copy then delete. To find out more about Reuters visit www.about.reuters.com Any views expressed in this message are those of the individual sender, except where the sender specifically states them to be the views of Reuters Ltd.
Re: [ActiveDir] Moving user accounts.
http://blog.joeware.net/2005/07/17/48/M@On 8/30/06, David Cliffe [EMAIL PROTECTED] wrote: Hi Jim, Yes, I have found this to be true...there is no move object delegation.We have to use the create and delete. I wonder if that will change in future (I have a feeling it's been mentioned here several times before, but can't remember). -DaveC From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Kennedy, JimSent: Wednesday, August 30, 2006 3:17 PMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] Moving user accounts. I am I correct that to delegate moving user accounts from OU to OU I will have to allow them the ability to delete accounts. It appears accounts work similar to documents, a move is really a copy then delete. To find out more about Reuters visit www.about.reuters.com Any views expressed in this message are those of the individual sender, except where the sender specifically states them to be the views of Reuters Ltd.
RE: [ActiveDir] Moving user accounts.
In order to move an object in DS, you need the following three permissions: 1) DELETE_CHILD on the source container or DELETE on the object being moved 2) WRITE_PROP on the object being moved for two properties: RDN (name) and CN (or whatever happens to be the rdn attribute for this class, i.e. ou for org units). 3) CREATE_CHILD on the destination container. Met vriendelijke groeten / Kind regards, Ing. Jorge de Almeida Pinto Senior Infrastructure Consultant MVP Windows Server - Directory Services LogicaCMG Nederland B.V. (BU RTINC Eindhoven) ( Tel : +31-(0)40-29.57.777 ( Mobile : +31-(0)6-26.26.62.80 * E-mail : see sender address From: [EMAIL PROTECTED] on behalf of Kennedy, Jim Sent: Wed 2006-08-30 21:16 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Moving user accounts. I am I correct that to delegate moving user accounts from OU to OU I will have to allow them the ability to delete accounts. It appears accounts work similar to documents, a move is really a copy then delete. This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. winmail.dat
