2015年10月20日 星期二

Delegate Moving User, Group and Computer Accounts Between Organizational Units in Active Directory

http://social.technet.microsoft.com/wiki/contents/articles/20747.delegate-moving-user-group-and-computer-accounts-between-organizational-units-in-active-directory.aspx

ObjectOrganizational UnitPermission TabApply toPermission
UserSource Organizational UnitObjectThis object and all descendant objectsDelete User objects
PropertiesDescendant User objectsWrite Distinguished Name
PropertiesDescendant User objectsWrite name
PropertiesDescendant User objectsWrite Name 
Destination Organizational UnitObjectThis object and all descendant objectsCreate User objects
GroupSource Organizational UnitObjectThis object and all descendant objects Delete Group objects
PropertiesDescendant Group objectsWrite Distinguished Name
PropertiesDescendant Group objectsWrite name 
PropertiesDescendant Group objectsWrite Name 
Destination Organizational UnitObjectThis object and all descendant objects Create Group objects
ComputerSource Organizational UnitObjectThis object and all descendant objects Delete Computer objects
PropertiesDescendant Computer objectsWrite Distinguished Name
PropertiesDescendant Computer objectsWrite name 
PropertiesDescendant Computer objectsWrite Name
Destination Organizational UnitObjectThis object and all descendant objectsCreate Computer objects

沒有留言:

張貼留言