none
Can move but cannot delete an Active Directory Object

    Question

  • Hi experts,

    As a Domain admin, i would like to have a permission model on an OU "A". Requirement is like this: users are member of Group "B" should not be able to delete any object under OU "A" however should be able to move the object in sub OU's under OU "A".

    I have given the permission to the Group "B" as Deny Permission for (Delete and Delete Subtree). Now users of Group "B" are not able to delete any object under OU "A" but also they are not able to move the object. Error says Access is Denied.

    Is this achievable? Any assistance is most appreciable.

    Cheers

    Vipin

    • Changed type vipin chauhan Monday, April 19, 2010 3:30 PM
    • Changed type vipin chauhan Tuesday, April 20, 2010 11:28 AM Business Requirement
    • Changed type vipin chauhan Tuesday, April 20, 2010 3:02 PM
    Monday, April 19, 2010 3:20 PM