Hi,
I tried to run the cmdlets Move-ADObject and Set-ADComputer as Domain Admin on an Windows 2012 R2 Domain Controller. 'Protect from Accidental Deletion' is disabled on the Containers. The cmdlet fails and I receive an "Access is denied" error message.
This only occurs if I run the cmdlets on a DC. On a member Server it works fine (with same credentials)!!
I found a kb article KB2806748 that refers to a hotfix for 2008 R2 and 2012. But the Problem seems to be still existent in Windows Server 2012 R2.
Is there any way how this can be fixed?