While deleting OU in active directory containing child objects protected from accidental deletion the above shown alert appears.If Use Delete Subtree server control is not selected error will be thrown if any child object is protected from accidental deletion.I would like to implement the same using cpp.
My current solution is to iterate all child objects and check if they are protected from accidental deletion.However that would be costly and hence i'm looking for better solution . How does microsoft determine if any child object is protected instantly. Are there any ace set in parent OU if child object is protected?? Any insights would be helpful.