Problem in a nutshell:
In ADUC (Server 2003), I am able to add and delete computer objects from the default Computers container, and I can add and delete computer objects from the taget OU, but when I try to move a computer object from Computers to the OU, I get an Access Denied error.
More information:
I've looked all over for posts of similar problems, and I can't find anything that seems to apply.
The account I'm using is not a member of any group that has any Deny attributes, except that there is a permission entry for Everyone having Deny on Delete All Child Objects, but if that were a problem, then it would affect the domain admin accounts that have no problem, right?
I thought that I could get around it by creating my computer accounts on the OU, then adding the machines to the domain from the PC. But it wouldn't let me add the machine to the domain in that case. I can add machines to the domain otherwise, but they go into the default Computers container.
Thanks in advance for any help!
Bookmarks