How to Move Computer Objects Between OUs in Active Directory

In this article, we shall discuss how to move a computer object from one container (OU) to another. There are times you will want to move a computer or user object to a new OU in order to allow the security (GPO) policies to apply to them. Please, see How to apply Windows Updates from WSUS to AWS Instances, Important Areas to Master on WSUS, and Hacker Thinking in Ransomware Attacks: Backup Is the real Target.

In my case, I will be moving the Ansible Server to a different OU in order to apply the DriveLock policy to it. This will ensure DriveLock Agents are automatically deployed to the computers.

Please, see how to Move Azure Resources between Subscriptions, How to move the Taskbar to a second screen in Windows, and how to Setup a Domain Controller as Recommended by Microsoft.

Method 1: Move a Computer Object from one container

Moving computer objects between Organizational Units (OUs) in Active Directory organizes systems for targeted Group Policy application and delegation. Use GUI for quick singles, PowerShell for bulk or automation, ensuring Domain Admin or delegated “Delete” on source and “Create” on target OUs.

I will be demonstrating these steps using Active Directory Users and Computer Console. Launch the Active Directory User and Computer Tool as shown below.

Navigate to the desired OU and move the computer object from the Computer default container to EmployeePC OU as shown below

You will be prompted with a waring window as shown above. Select “Yes” acknowledging that you are okay with policies being altered.

Please, see How to Move OneDrive Folder to a different location in Windows, and how to Change the default Save and Download Location in Windows.

Method 2

The first method I discussed above can be a bit risky as you can easily move an object into a wrong OU. So I prefer using this method below.

Navigate to the OU (computer container) where the computer you wish to move is. Right-click on the computer object you wish to move, and click on move

This will open the move object into container window as shown below. Select the desired OU you wish to move the object into

Now when you click on the EmployeePC OU, the computer object will be available in the OU.

Screenshot of Active Directory Users and Computers interface showing a list of computers, including 'EmployeePC', under the 'techdirect.local' domain.

Note: The same principles applies to moving a user object as well.

Please, see Client Visibility Issues: Fix WSUS Clients appear then disappear in the console, Cloud Protection Manager: N2WS Veeam CPM Guide, and How to implement N2WS Backup & Recovery (CPM).

Method 1: Moving User object in Active Directory

Just move the user object into the right container and click on Yes to accept the security warning

Screenshot of Active Directory Users and Computers interface showing users list with a warning message about moving objects in Active Directory Domain Services.

Method 2

Right-click on the user object and move it to the desired OU as shown below. This is the recommended method.

Active Directory Users and Computers interface showing user accounts and a dialog box for moving an object into a container.

I hope you found this guide on how to move a computer object from one container (OU) to another very useful. Please, feel free to leave a comment below.