Powershell – Move-ADObject Access is Denied when using limited access credentials

If you don't want to change local or server side GPOs:

Go to Control Panel -> Credential Manager on the local computer you are trying to connect from.
You will see three sections:

1. Windows Credentials
2. Certificate-Based Credentials
3. Generic Credentials

Remove the credentials from Windows Credentials and add it to Generic Credentials.

I've found its easier to get the object then to move the object. You need to pass an AD object to Move-ADObject when using the pipeline, or you can pass a completed identity. So you'll retrieve the ADUser, then preform actions on it, i.e. pass it to Move-ADOject.

Import-CSV C:\Path\To\CSV\file.csv | ForEach-Object { Get-ADUser -Identity $_.Name | Move-ADObject -targetpath "OU=Region1/2,OU=OU2,OU=OU1,DC=Something,DC=local" }

If you can gaurentee that to can build the whole identity string on the fly, then you method could be possible. The CSV would have to contain the identity string though, "CN=Test User,OU=OU2,OU=OU1,DC=Something,DC=local"

I can't seem to add a comment to the other answer, but I can explain why your having the string issue. It has to do with $_ variable expansion within the quoted string. You can see this demonstrated here.

PS C:\> Import-Csv .\test.csv | %{$_.name}
Test User
PS C:\> Import-Csv .\test.csv | %{"$_.name"}
@{Name=Test User; SamAccountName=TU; displayName=Test User}.name
PS C:\> Import-Csv .\test.csv | %{"$($_.name)"}
Test User

My test.csv file contains:

Name,SamAccountName,displayName
Test User,TU,Test User

The string expansion just parses the $_ within the string, using $( [variable] ) tells powershell to expand the variable within the string.

So using this should work

Import-CSV C:\Path\To\CSV\file.csv | %{ Move-ADObject -identity "CN=$($_.Name),OU=OU2,OU=OU1,DC=Something,DC=local" -targetpath "OU=Region1/2,OU=OU2,OU=OU1,DC=Something,DC=local" }