I think it has somthing to do with the way we are delegating control, the lower level ou's are not inheriting everything that they should. I will try to move a computer account from one container to another. I always get accessed denied, even though it says full control on the ou and it also says that it is inherited. The way I have to do it right now is if I go into that computer accounts properties I then can select full control and be able to move the account no problems. No matter what we do, all computer accounts basicly have no permissions for the group that was delegated full control. I would really like to get this working.