Hi, my boss wants to restrict the ability to create OUs to only domain admins. Currently, there are permissions set on several different OUs to allow OU creation to different groups and users. There are too many to count. I thought of denying the right to domain users, but that includes our admin accounts. Any suggestions?