Hi guys,
This is probably a question covered many a time so apologies if it has, although i cant find one with a solution that i want.
So i have delegated rights for a certain group to manage computer objects which is fine works just how i want it, or works at least where prevent accidental deletion is not ticked, which makes sense, but i want to be able to leave that ticked but remove the deny delete permission on computer objects from the everyone permission set at each OU level as a result of the prevent accidental deletion object being checked, where it is set on each OU it means you have to touch every OU instead of being able to delegate the permission or retract it at the top of the tree... does anyone know a way to remove just this one permission at the top of the tree or at least conteract it??
Thanks,
Adam
