I'm customizing the Delegwiz.inf file and am not finding any way to deny permissions. For example, to deny the deletion of a top level Organizational Unit to a specific group.
None of my docs explained how to do this. Does it exist? Below is an example of how to allow certain rights
Description = "Create an Organizational Unit"
ObjectTypes = SCOPE