Chris,
You're likley going to have to give them Full Control on the Computer
objects in the Advanced properties in the Computer Container and the
target OU. You're not giving up much by giving them FC on a computer
object - because if you want them to move it, they have to be able to
delete it,
]
Subject: RE: [ActiveDir] Move computer within domain question
Chris,
You're likley going to have to give them Full Control on the Computer
objects in the Advanced properties in the Computer Container and the
target OU. You're not giving up much by giving them FC on a computer
object - because
- www.microsoft.com/windowsxp/expertzone
-Original Message-
From: [EMAIL PROTECTED]
[mailto:ActiveDir-owner;mail.activedir.org] On Behalf Of cflesher
Sent: Wednesday, November 06, 2002 10:56 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Move computer within domain question
Thanks
PROTECTED]
Subject: RE: [ActiveDir] Move computer within domain question
Yes, you can delegate the permission at the Computers container level.
As to the repurcussions - it could be worse. If the most damage one can
do is to delete some computer accounts, then that's a mitigatable risk
