Pau Lo
asked on
accidental deletion - ad recycle bin
do you still need to prevent 'accidental deletion' of OU's if you have the AD recycle bin enabled? does the fact ad recycle bin is enabled reduce the impact of accidental deletion of an OU?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
It adds Everyone deny delete rights on ACLs. It was an old hack that was later added to GUI.
Deny always win, even on Domain Admin/Enterprise admin
Deny always win, even on Domain Admin/Enterprise admin
ASKER