Hello forum,
I am currently working on a Server Core (Windows 2008R2) and I have an OU called 'Groups'. In this OU I have several Global and Domain Local groups that I want to protect from accidental deletion with dsacls.exe. I am however having trouble finding the correct syntax.
Using
dsacls "cn=GG-SALES,ou=Groups,dc=S14,dc=NID" /d Everyone:SDDT
did not work, and so far I have only been able to protect my OU from deletion. Giving the /I:T parameter did not protect the underlying groups.
Does anyone have an idea how I can protect the groups in only this OU from accidental deletion with dsacls.exe ?
Many thanks.