Delegate move computer objects from one OU to another in Windows Server 2016
Donate Us : paypal.me/MicrosoftLab
Delegate move computer objects from one OU to another in Windows Server 2016
1. Prepare
– DC1 : Domain Controller(Yi.vn) | WIN101 : Client
2. Step by step : Allow HiepIT move Computers from Computer Container to IT OU
– DC1 : Configure allow HiepIT to remote to Domain Controller and move Computers betweent OUs
+ Enable remote desktop ——————–******************** Youtube.com/c/MicrosoftLab ********************———-
+ Server Manager – Tools – Active Directory Users and Computers – Yi.vn – Builtin OU :
+ Double-click “Remote Desktop Users” – Members tab – Add… : HiepIT
+ Double-click “Server Operators” – Members tab – Add… : HiepIT (or add to one of groups : Account Operators, Backup Operators, Print Operators)
+ Server Manager – Tools – Group Policy Management – Yi.vn – Right-Click ‘Default domain Plicy’ – Edit… – Computer Configuration – Polices
– Windows Settings – Security Settings – Local Polices – User Rights Assignment – Allow log on through Remote Desktop Services :
+ Tick “Define these policy settings” + Click “Add User or Group…” – Browse… : Administrators;HiepIT – OK
+ Start – cmd, type : gpupdate /force
+ Active Directory Users and Computers – Right-click Computers container – Delegate Control… :
+ Users or Groups : Add… : HiepIT – Tasks to Delegate : Choose ‘Create a custom task to delegate’
– Active Directory Object Type : Choose ‘Only the following objects in the folder:’ – Select ‘Computer objects’
– Tick ‘Create selected objects in this folder’ + ‘Delete selected objects in this folder’ – Permissions : Tick Write – Finish
+ Active Directory Users and Computers – Right-click IT OU – Delegate Control… : … (do the same Computers container)
– WIN101 : Remote to DC1 use HiepIT, move WIN101 and WIN102 to IT OU
+ Start – Server Manager – Tools – Active Directory Users and Computers – Yi.vn :
+ Computers container – Right-Click WIN101 – Move… – browse to IT OU – OK === OK
source
windows server
