Can you deny\disable the right click-move functionality on computer objects in Active Directory? I have a group that resets passwords and unlocked accounts on user objects but they can move computer objects from the default migration container to OUs. Why?