access denied when domain admin move organizational unit objects

Good Day

Urgently need asistance in solving an access denied error when moving
organizational unit objects from one OU to another , our active
directory is windows 2003 forest with native mode and i am memeber of
the domain admin group , i checked the following KB:

http://blog.joeware.net/2005/07/17/48/

and the permission are ok


Thanks for support and cooperation

How are you moving the OU? Are you by any chance doing it from an another
system running Vista/Win2k8 with UAC in place?
Have you actually checked Effective Permissions?

hth
Marcin

"ahmedgtech" <ahmed.ginina@gmail.com> wrote in message
news:7046148d-980e-4620-b867-4741815307a4@e23g2000yqd.googlegroups.com...
> Good Day
>
> Urgently need asistance in solving an access denied error when moving
> organizational unit objects from one OU to another , our active
> directory is windows 2003 forest with native mode and i am memeber of
> the domain admin group , i checked the following KB:
>
> http://blog.joeware.net/2005/07/17/48/
>
> and the permission are ok
>
>
> Thanks for support and cooperation

"ahmedgtech" <ahmed.ginina@gmail.com> wrote in message
news:7046148d-980e-4620-b867-4741815307a4@e23g2000yqd.googlegroups.com...
> Good Day
>
> Urgently need asistance in solving an access denied error when moving
> organizational unit objects from one OU to another , our active
> directory is windows 2003 forest with native mode and i am memeber of
> the domain admin group , i checked the following KB:
>
> http://blog.joeware.net/2005/07/17/48/
>
> and the permission are ok
>
>
> Thanks for support and cooperation


In addition to Marcin's question, can the actual Domain Administrator move
the objects?

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.

I tried doing it from my Win XP /sp3 machine and then i went to the DC
( win 2003 std /sp2 ) and i used adsiedit to move the object , i can
move other objects including OUs but these OUs in particular i can not
move nor my other Domain Admins colleagues even though we checked the
permission and we have full control on the objects with inhertance.


Please advice

"ahmedgtech" <ahmed.ginina@gmail.com> wrote in message
news:a2fb6527-d31e-4c5e-a96c-43589e7dbbb9@z7g2000vbl.googlegroups.com...
>I tried doing it from my Win XP /sp3 machine and then i went to the DC
> ( win 2003 std /sp2 ) and i used adsiedit to move the object , i can
> move other objects including OUs but these OUs in particular i can not
> move nor my other Domain Admins colleagues even though we checked the
> permission and we have full control on the objects with inhertance.
>
>
> Please advice


I'm confused with your response.

Did you say you can or cannot move the objects using the default Domain
Administrator account (not your account or your colleague's account)?

Ace

On Nov 23, 3:48*pm, "Ace Fekay [MCT]" <ace...@mvps.RemoveThisPart.org>
wrote:
> "ahmedgtech" <ahmed.gin...@gmail.com> wrote in message
>
> news:a2fb6527-d31e-4c5e-a96c-43589e7dbbb9@z7g2000vbl.googlegroups.com...
>
> >I tried doing it from my Win XP /sp3 machine and then i went to the DC
> > ( win 2003 std /sp2 ) and i used adsiedit to move the object , i can
> > move other objects including OUs but these OUs in particular i can not
> > move nor my other Domain Admins colleagues even though we checked the
> > permission and we have full control on the objects with inhertance.
>
> > Please advice
>
> I'm confused with your response.
>
> Did you say you can or cannot move the objects using the default Domain
> Administrator account (not your account or your colleague's account)?
>
> Ace

I can not move with my Domain admin account and my other domain admin
can not move it as well

> On Nov 23, 3:48*pm, "Ace Fekay [MCT]" <ace...@mvps.RemoveThisPart.org>
> wrote:
>> "ahmedgtech" <ahmed.gin...@gmail.com> wrote in message
>>
>> news:a2fb6527-d31e-4c5e-a96c-43589e7dbbb9@z7g2000vbl.googlegroups.com...
>>
>>> I tried doing it from my Win XP /sp3 machine and then i went to the DC
>>> ( win 2003 std /sp2 ) and i used adsiedit to move the object , i can
>>> move other objects including OUs but these OUs in particular i can not
>>> move nor my other Domain Admins colleagues even though we checked the
>>> permission and we have full control on the objects with inhertance.
>>> Please advice
>>
>> I'm confused with your response.
>>
>> Did you say you can or cannot move the objects using the default Domain
>> Administrator account (not your account or your colleague's account)?
>>
>> Ace
>
> I can not move with my Domain admin account and my other domain admin
> can not move it as well

If the default Domain Administrator account cannot move objects, then
it appears that there is another issue going on that will require
further investigation.

To help diagnose the issue, we'll need configuration information.
Please post the following to help evaluate basics, for starters.

Unedited ipconfig /all of your workstation and of the DC.
Event Log errors - EventID#s on the workstation and the DC.
How many DCs are in the infrastructure?
Are any of the DCs multihomed?

Thank you,
Ace