Protecting AD OU's structure against deletion/moves...

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi!

I would like to know what is the best practice to protect an AD OU's
structure against unwanted deletion/moves from domain administrators (human
error).

I tried to apply "Deny" to "Delete" and "Delete subtree" to Everyone group
to the root OU I want to protect, but I'm still able to delete sub-OU of
this OU.

Even applying this security settings to a specific OU (ex: test), and
deleting it afterwards is still working!!!

What's wrong? Deny security should not take precedence over normal security???

Thanks.

Claude Lachapelle
Systems Administrators, MCSE
.

Relevant Pages

  • Re: Protecting AD OUs structure against deletion/moves...
    ... If you start with playing around especially with DENY you will create more problems like preventing this i think. ... I would like to know what is the best practice to protect an AD OU's ... structure against unwanted deletion/moves from domain administrators ... Even applying this security settings to a specific OU ...
    (microsoft.public.windows.server.active_directory)
  • Re: Protecting AD OUs structure against deletion/moves...
    ... but this will not prevent other domain admins to remove the checkmark and then you are at the same point as before. ... I would like to know what is the best practice to protect an AD OU's ... structure against unwanted deletion/moves from domain administrators ... Even applying this security settings to a specific OU ...
    (microsoft.public.windows.server.active_directory)
  • Re: Hardware vs Software
    ... > should do to protect themselves from the evils rampant on ... or warning that the security settings prevent scripts from running, ... All of the above will happen, even if a router is in place. ... not a firewall, though the NAT process generally has a comparable effect as ...
    (microsoft.public.security.virus)
  • Re: Protecting Cetain Cells in Excel
    ... Also can I protect it from being copied? ... "Paul B" wrote: ... to change the macro security settings to get the macro to run. ...
    (microsoft.public.excel.worksheet.functions)
  • Re: Protecting AD OUs structure against deletion/moves...
    ... This is represented by "protect object from accidental deletion" checkbox ... which will override your deny aces. ... You have to protect each OU ... Even applying this security settings to a specific OU ...
    (microsoft.public.windows.server.active_directory)