Today I was playing a bit in my lab with PowerShell and AD Computer Objects.
I automate the daily cleanup of Inactive Computer Object and move them to a specific OU.
This script is running with his own service account, the privileges required are specified below.
Move Computer Object INSIDE an OU:
Move Computer Object OUTSIDE an OU:
-Write All Properties
As an example, here I was using the "Delegation of Control Wizard" to allow the "Move out"