I would like to select the default computer OU as a Assignment scope for a security role. I can select every other object and OU expect this. Is there a way to select it? domain.com\computers
Other top level OUs are selectable, such as domain.com\users, just not computers.
I would like to allow users to move computers from the default OU to an OU and sub-OUs they control only.
The permissions work if I give assignments over all objects, but then they can dump the computers anywhere.