Donate Us : paypal.me/MicrosoftLab

Delegate move computer objects from one OU to another in Windows Server 2019

1. Prepare

- DC31 : Domain Controller(Yi.vn) | WIN101 : Client

2. Step by step : Allow HiepIT move Computers from Computer Container to IT OU

- DC31 : Configure allow HiepIT to remote to Domain Controller and move Computers betweent OUs

+ Enable remote desktop

+ Click 'File Explorer' - Right-Click 'This PC' - Properties - Remote settings - Choose 'Allow remote connections to this computer' - OK

+ Server Manager - Tools - Active Directory Users and Computers - Yi.vn - Builtin OU :

+ Double-click "Remote Desktop Users" - Members tab - Add... : HiepIT

+ Double-click "Server Operators" - Members tab - Add... : HiepIT (or add to one of groups : Account Operators, Backup Operators, Print Operators)

+ Server Manager - Tools - Group Policy Management - Yi.vn - Right-Click 'Default domain Plicy' - Edit... - Computer Configuration - Polices

- Windows Settings - Security Settings - Local Polices - User Rights Assignment - Allow log on through Remote Desktop Services :

+ Tick "Define these policy settings" + Click "Add User or Group..." - Browse... : Administrators;HiepIT - OK

+ Start - cmd, type : gpupdate /force

+ Active Directory Users and Computers - Right-click Computers container - Delegate Control... :

+ Users or Groups : Add... : HiepIT - Tasks to Delegate : Choose 'Create a custom task to delegate' - Active Directory Object Type : Choose 'Only the following objects in the folder:'

- Select 'Computer objects' - Tick 'Create selected objects in this folder' + 'Delete selected objects in this folder' - Permissions : Tick Write - Finish

+ Active Directory Users and Computers - Right-click IT OU - Delegate Control... : ... (do the same Computers container)

- WIN101 : Remote to DC31 use HiepIT, move WIN101 and WIN102 to IT OU

+ Start - Server Manager - Tools - Active Directory Users and Computers - Yi.vn :

+ Computers container - Right-Click WIN101 - Move... - browse to IT OU - OK === OK

+ Right-Click WIN102 - Move... - browse to IT OU - OK === OK

------------------------------------------------------------******************** Youtube.com/c/MicrosoftLab ********************---------------------------------------------------------

source
windows server