I've followed this article here to delegate moving users to a group. I set the permissions of 'Source OU' and 'Destination OU' at the same high level OU (for example 'OfficeA'), so the group could move users around between the departments OUs inside the 'OfficeA' OU.
When I move a user, if the user is inside an OU that is the LAST OU in the tree (no other child OU inside it), it works fine.
If the user is inside an OU which has others child OUs (not the last one in the tree), I get the 'Access Denied' error when moving.
The permissions are inheriting correctly from the top to the child OUs. I can't figure out whats going wrong, can anyone
enlighten me?