Hi guys,
recently I'm trying to delegate permissions for the Active Directory administration in our company. It all works great so far except for one thing.
I'm able to delegate the right to remove 'Protection Against Accidental Deletion' if its set, but somehow I can't find a way to delegate the right to initially set it. I already tried to grant Full Control for Computer Objects to the Group I want to delegate the rights to, but that didn't help.
I need this especially for Computer Objects but a general answer would be great either.
Hope someone can help me with this.
Thanks in advance.
Greetings