I need to revoke the explicit permissions assigned to Account Operators on all user objects under an OU but I cannot seem to find a way to do this on multiple objects. DSACLS works fine if I specify an exact object but I can't find a way changing all objects under an OU. Also tried to pipe the results of a dsquery to dsacls but it doesn't recognise the input.
Any help would be much appreciated
