How to delete a protected OU

[originofsymmetry]

Just wandering how you delete an OU with the "Prevent accidental deletion" box checked?

[Michael]

Haven't tried this in practice, but how about unticking the Prevent accidental deletion box?

[originofsymmetry]

Haven't tried this in practice, but how about unticking the Prevent accidental deletion box?

 

I haven't even made any OU's yet on my test box at home, just wondering how to do it, can't find anything in the built in help files, would have thought so tbh.

Can you access this from it's properties? sorry not at home so can't view it.

[Michael]

Well in 2000/2003 Server you can right click the OU and choose delete, or highlight the OU and press the delete key.

 

I'm guessing 2008 Server is the same, apart from you have an additional step which prevents accidental deletion. It would make sense unticking the box would then allow you to delete the OU.

 

Looking at Windows Server 2008 is on my 'to do' list

[john]

I believe its untick the box and then say yup okai and then bin as normal

[Gatt]

In ADUC, enable Advanced Features, now when you open the properties of the OU, you can uncheck the "Prevent Accidental Deletion" box....

[originofsymmetry]

In ADUC, enable Advanced Features, now when you open the properties of the OU, you can uncheck the "Prevent Accidental Deletion" box....

 

Cheers for the responses Gatt. worked a treat.

[westwoodtech]

Thanks Gatt! Forgot about those pesky advanced features.

[EduTech]

Yeah that got me the first time too! GATT is right obviously!

 

In a way it's a nice add-on stop's people who dont have much experience with AD doing anything stupid

 

James.

[westwoodtech]

Yes James, I know that how that goes with my test setup. My standard email contains the closing statement of: Please do not make changes without notifying me!

 

Steve

[EduTech]

Yes James, I know that how that goes with my test setup. My standard email contains the closing statement of: Please do not make changes without notifying me!

 

Steve

 

Good Stuff

 

To be far i have not yet had anything like that happen, but have seen it happen to people in the past.. hey ho we all make problems but it's not nice deleting things out of AD especially if it's an OU full of Computers! or Laptops!

[DAckroyd]

am I doing something studpid... actually don't answer that question but please answer my next one...

 

I have an OU, it's on a 2008 DC, I want to delete it but it's protected. I can't see anything useful if I goto properties on it (no tick box for allow deletion) and I don't know where I'm meant to look for the "Advanced Features" bit.

 

Thanks,

Dave

[EduTech]

am I doing something studpid... actually don't answer that question but please answer my next one...

 

I have an OU, it's on a 2008 DC, I want to delete it but it's protected. I can't see anything useful if I goto properties on it (no tick box for allow deletion) and I don't know where I'm meant to look for the "Advanced Features" bit.

 

Thanks,

Dave

 

See Attached

 

James.

[mounters]

am I doing something studpid... actually don't answer that question but please answer my next one...

 

I have an OU, it's on a 2008 DC, I want to delete it but it's protected. I can't see anything useful if I goto properties on it (no tick box for allow deletion) and I don't know where I'm meant to look for the "Advanced Features" bit.

 

Thanks,

Dave

 

To view advanced features click on View -> Advanced Features (needs to have a tick next to it).

[DAckroyd]

Thankyou.... I didn't have the advanced options turned on... thanks for the screen shot but without the advanced features enabled I only had the 3 tabs (General, Managed By, and COM+)

 

Now that one is burned to memory... they'll move the option in server 2011 won't they

[EduTech]

Thankyou.... I didn't have the advanced options turned on... thanks for the screen shot but without the advanced features enabled I only had the 3 tabs (General, Managed By, and COM+)

 

Now that one is burned to memory... they'll move the option in server 2011 won't they

 

Don't worry took me a little bit of time to work it out! i was ranting for about 5 minutes! i was oh now what have they gone and done here then!!

[anshohri]

Hi,

 

This removes protection that prevents an OU from accidental deletion. Consequently, you may have to remove these permissions to be able to perform bulk deletions of objects in Active Directory.

 

To add the protection back again, you can reselect the Deny check boxes for the Delete and Delete Subtree advanced permissions for the Everyone group for the OU and the Delete All Child Objects permission for the Everyone group on the parent container. For more information, see Protect an Organizational Unit from Accidental Deletion.

_________________________________________________________________________________________________________________

 

To remove protection that prevents an OU from accidental deletion:

 

1.Log on to the computer as a member of the Domain Admins group

 

2.Open Active Directory Users and Computers.

 

3.Click View, and then click Advanced Features.

 

4.First, clear permissions on the OU for which you want to remove protection. To do this, right-click the OU, and then click Properties.

 

5.In OU Properties, click the Security tab, and then click Advan[/u]ced.

 

6.In Permission Entries, select the Deny entry for the Everyone group, and then click Remove.

 

7.Click OK to close the Advanced Security Settings, and then click OK to close OU Properties.

 

8.Second, clear permissions on the parent container of the OU for which you want to remove protection. To do this, right-click the parent container, and then click Properties.

 

9.In ContainerProperties, click the Security tab.

 

10.In Group or user names, select the Everyone group, and then clear the Deny check box for Delete All Child Objects, and then click OK to close Container Properties.

 

 

I took this help from, you can always get help from MS Technet .. it rocks !!

 

technet dot microsoft dot com, hope you understand; not able to post a link overhere .. enjoy..

[wackou]

Thanks !