asked on

Disable drag and drop for ADUC Server 2008

Hi all, i know there is a hot fix for this for 2003, but how do you disable this for 2008 + R2

thanks

What exactly are you trying to prevent?

Are you talking about disabling drag and drop within ADUC? If so then in ADUC go to View and turn on Advanced Features. Once that is on then you can select an object in ADUC and go into it's properties, then go to the Object tab and check the "Protect object from accidental deletion" check box.

If you want to do it across all objects in your Active Directory then that can be done using PowerShell. Example: Get-ADobject -Filter * -SearchBase “OU=Users,DC=Domain,DC=com” | Set-adobject -ProtectedFromAccidentalDeletion $true

cwstad2

ASKER

Thanks yes, some are not protected. Is there a script to find out which ones arent. Also can you stop the objects being drag and dropped?

ASKER CERTIFIED SOLUTION

Delete

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

cwstad2

ASKER

Excellent information thanks. Is it possible to stop computers and users and groups from being dragged and dropped?

Delete

Both of my previous suggestions will work for all AD objects to include users, groups and computers.

The easiest way is to run the PowerShell commands I provided for each object to check the Protect object from accidental deletion. Then users will not be able to drag and drop any of those objects without first unchecking that box.

If you don't even want users to be able to uncheck the box then you will need to delegate out the proper permissions as discussed in that link that I provided to block the users you don't want to have that access. However, you don't want to block all users as your Domain Admins should still retain the permissions to check/uncheck the Protect objects from accidental deletion box.

cwstad2

ASKER

thanks