Delegation of control to move computers failing

[SteveMCSE]

I used Delegation of control wizard in a windows 2000 native domain to delegate control to a group to join computers to the domain. They can add and delete computers just fine. The problem lies when they try to move computers to/from containers/OUs. It says access is denied. Insufficient rights to peform this action. (Something along those lines.) So I looked at the security for the domain (that's where I did the delegation) and tried to find other settings for that group. There is no, "Let them move computers" security right in there. What can I do to all the group to move computers?

 

[agrappe]

The 'Security' tab on the properties of the containers where the PCs will be(or at the domain level if you wish) should have the users listed. Select the user(or add the user if they are not listed), click 'Advanced...', select the user from the list and make sure that the two values 'Create Computer Objects' and 'Delete Computer Objects' are checked in the 'Allow' column.

 

[SteveMCSE]

I just checked the access at the domain level. That is where i did the delegation of control. I went to several of the OUs to ensure that the rights were inheritted and they were. I made sure that Create and Delete computer objects was selected to Allow on several OUs and it is. The problem isn't with creating and deleting though. The users can do that just fine. They just can't move them. It seems that to move you must delete from one OU and create in another, but that isn't the case. I tried it again because I thought that maybe AD needed time to replicate or something. No change.