Active Directory computer account rename permission

hi,

  i'm using active directory 2008 domain setup.. have given help-desk support team delegation permission join computer account domain. i've given following permission our team.

=======================================

validated write dns host name

reset password

validated write service principal 

read account restriction

write account restriction

create computer objects

delete computer objects

=======================================

 

if want rename computer account in domain can't . when tried rename support team getting below error.

 

the following error occurred attempting rename computer "computer account name"  : access denied.

 

anyone permission should give, please let me know. 

 

 

---

aucsna

hello,

 

as additional info:

you can add more template delegwiz.inf file.

go the directory %windir%\inf (in windows server 2008 or later %windir%\system32) , copy delegwiz.inf file here to delegwiz.inf file (you must have permission change , save file).

for rename computer account, use template 35.

 

regards

Windows Server  >  Directory Services