Minimal permissions to move user between OUs.
Windows Server Forum Index Windows Server
Server discussion on Windows platform.
 
 FAQFAQ   MemberlistMemberlist     RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 
 
Google
 
Web winserverhelp.com
Minimal permissions to move user between OUs.

 
Post new topic   Reply to topic    Windows Server Forum Index -> Active Directory
Author Message
Frank Smith BAE Systems
Guest





Posted: Fri Nov 11, 2005 1:50 am    Post subject: Minimal permissions to move user between OUs. Reply with quote

Have delegated AD permissions so that people that create accounts can not
delete them. Have separate OU that USER accounts can be deleted from if you
are member of userdelete group. My problem is I want my admins in the
userscreate group to be able to move user account from the active OU to the
"to be deleted OU" without them having the permissions to delete accounts
themselves. The usecrreate group can create user accounts in both OUs they
just are unable to drag the accounts from one to the other.

Is there a permissions that will allow the moving of user accounts without
granting the deleting of user accounts?
Back to top
Joe Richards [MVP]
Guest





Posted: Fri Nov 11, 2005 1:50 am    Post subject: Re: Minimal permissions to move user between OUs. Reply with quote

Nope.

See http://blog.joeware.net/2005/07/17/48/ for minimal permissions.

joe

Frank Smith BAE Systems wrote:
Quote:
Have delegated AD permissions so that people that create accounts can not
delete them. Have separate OU that USER accounts can be deleted from if you
are member of userdelete group. My problem is I want my admins in the
userscreate group to be able to move user account from the active OU to the
"to be deleted OU" without them having the permissions to delete accounts
themselves. The usecrreate group can create user accounts in both OUs they
just are unable to drag the accounts from one to the other.

Is there a permissions that will allow the moving of user accounts without
granting the deleting of user accounts?
Back to top
 
Post new topic   Reply to topic    Windows Server Forum Index -> Active Directory All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum




New Topics Powered by phpBB