Delegate "Delete Computer object" to group

Home Forums Server Operating Systems Windows Server 2008 / 2008 R2 Delegate "Delete Computer object" to group

Viewing 1 post (of 1 total)
  • Author
    Posts
  • Avatar
    sassaidi
    Member
    #164663

    Hi,

    I am trying to grant Delete Computer rights to a group. I tried granting “Delete Computer object” on the OU but that does not work. If followed this:

    http://sigkillit.com/2013/06/12/delegate-adddelete-computer-objects-in-ad/

    but it doesn’t let the users delete a computer object. If I select DELETE (check mark it under Allow) on the OU for that group, the users can remove computer object.

    I am worried that DELETE might be too much for that group, I want them to only have permission to delete computer objects, nothing else. Is there a way?

    Thanks,

    Sas

Viewing 1 post (of 1 total)

You must be logged in to reply to this topic.