Link to home
Start Free TrialLog in
Avatar of Klint_turney
Klint_turney

asked on

Removing the ability to delete an OU

I have a account called Dameware Admins and it was created by someone else and granted way to many permissions.  I need to remove the right to delete or create an OU in AD, also the ability to delete Groups out of AD.  How can I reconfig this account without having to create a new one?
ASKER CERTIFIED SOLUTION
Avatar of mikeleebrla
mikeleebrla
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Klint_turney
Klint_turney

ASKER

If there is audit enabled how do I view the logs?  Aren't they in Event Viewer- Security?

Also you delete something from a OU wouldn't that show only on the DC you're auth to?
hold up, your initial question asked how you remove the ABILITY to delete groups, etc etc, now you are talking about auditing and event logs.....

which do you want? a how to for permissions, or a how to on logging events?  b/c your initial question mentioned nothing about logging/auditing.

but yes, whatever you HAD logging turned on for will show up in the security section of the event viewer.