Quantcast
Viewing all articles
Browse latest Browse all 31638

Powershell move-ADObject: ACCESS DENIED ---- not due to "protect from accidental deletion"

Hi,

Please can someone tell me why the following Powershell is giving me this permissions error:

PS C:\Users\Charles> Move-ADObject 'CN=VD-SALES-04,OU=Computers,OU=TIUK,DC=tiuk,DC=local' -TargetPath 'OU=VirtualDesktop
s,OU=Desktops,OU=Workstations,OU=Computers,OU=TIUK,DC=tiuk,DC=local'
Move-ADObject : Access is denied
At line:1 char:1+ Move-ADObject 'CN=VD-SALES-04,OU=Computers,OU=TIUK,DC=tiuk,DC=local' -TargetPath ...+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~+ CategoryInfo          : PermissionDenied: (CN=VD-SALES-04,...C=tiuk,DC=local:ADObject) [Move-ADObject], Unauthor
   izedAccessException+ FullyQualifiedErrorId : ActiveDirectoryCmdlet:System.UnauthorizedAccessException,Microsoft.ActiveDirectory.Manag
   ement.Commands.MoveADObject

I am a member of the Domain Admins and Enterprise Admins group
I can move the computer object via ADUC no problem logged in as me
The above Powershell is run as me - I have made sure it is not running as local Administrator using RUNAS
I have made sure that Protect from Accidental Deletion is off on all OUs and AD objects concerned
My effective permissions on all concerned OUs and AD objects is FULL CONTROL - no denies at all

Please help, this is driving me mad and wasting a lot of time I really need to be spending on other things.

Thanks,

Charles


Viewing all articles
Browse latest Browse all 31638

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>