Quantcast
Channel: Windows PowerShell forum
Viewing all articles
Browse latest Browse all 21975

Powershell move-ADObject: ACCESS DENIED ---- not due to "protect from accidental deletion"

$
0
0
 

Hi,

I originally posted this to the Directory Services forum and was told to rather ask the peeps on this forum.

Please can someone tell me why the following Powershell is giving me this permissions error:

PS C:\Users\Charles> Move-ADObject 'CN=VD-SALES-04,OU=Computers,OU=TIUK,DC=tiuk,DC=local' -TargetPath 'OU=VirtualDesktop
s,OU=Desktops,OU=Workstations,OU=Computers,OU=TIUK,DC=tiuk,DC=local'
Move-ADObject : Access is denied
At line:1 char:1+ Move-ADObject 'CN=VD-SALES-04,OU=Computers,OU=TIUK,DC=tiuk,DC=local' -TargetPath ...+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~+ CategoryInfo          : PermissionDenied: (CN=VD-SALES-04,...C=tiuk,DC=local:ADObject) [Move-ADObject], Unauthor
   izedAccessException+ FullyQualifiedErrorId : ActiveDirectoryCmdlet:System.UnauthorizedAccessException,Microsoft.ActiveDirectory.Manag
   ement.Commands.MoveADObject

I am a member of the Domain Admins and Enterprise Admins group
 I can move the computer object via ADUC no problem logged in as me
 The above Powershell is run as me - I have made sure it is not running as local Administrator using RUNAS
 I have made sure that Protect from Accidental Deletion is off on all OUs and AD objects concerned
 My effective permissions on all concerned OUs and AD objects is FULL CONTROL - no denies at all

Please help, this is driving me mad and wasting a lot of time I really need to be spending on other things.

Thanks,

Charles

   

Viewing all articles
Browse latest Browse all 21975

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>