I have setup AD domain delegation to a Helpdesk group so they can manage AD accounts.
The permission is being listed in the attached.
I am seeing two issues:
1. The tech cannot delete computer accounts in AD.
2. The tech cannot create a new OU in AD.
Please advise how this can be fixed.
Thanks in advance ; )