All OUs in this domain should be protected from accidental deletion

All OUs in this domain should be protected from accidental deletion.

All OUs in this domain should be protected from accidental deletion.

Severity: Warning

Problem: Some organizational units (OUs) in this domain are not protected from accidental deletion.

Impact: If all OUs in your Active Directory domains are not protected from accidental deletion, your Active Directory environment can experience disruptions that might be caused by accidental bulk deletion of objects.

해결:Make sure that all OUs in this domain are protected from accidental deletion.

Best Practices Analyzer

With Active Directory Users and Computers console

To “protect an OU from accidental deletion”, do the following:

1. Open Active Directory Users and Computers console;
2. Right click the OU that you want to protect from accidental deletion, 그리고 클릭 Properties;
3. Go to the tab Object, check “Protect object from accidental deletion” and click 좋아요.

메모: If you don’t see the Object tab you must enable Advanced Features. In the Active Directory Users and Computers, console click View 그리고 선택하십시오 Advanced Features.

With Windows PowerShell

1. 달리다 Windows PowerShell as Admin on Domain Controller;

2. Type the following to list all OU’s where the option “Protect object from accidental deletion” is disabled:

Get-ADOrganizationalUnit -filter * -Properties ProtectedFromAccidentalDeletion | where {$_.ProtectedFromAccidentalDeletion -eq $false} | ft

3. Enter the following command in PowerShell:

Get-ADOrganizationalUnit -filter * -Properties ProtectedFromAccidentalDeletion | where {$_.ProtectedFromAccidentalDeletion -eq $false} | Set-ADOrganizationalUnit -ProtectedFromAccidentalDeletion $true

4. To verify all OU’s are modified, enter this command in PowerShell:

Get-ADOrganizationalUnit -filter * -Properties ProtectedFromAccidentalDeletion | where {$_.ProtectedFromAccidentalDeletion} | ft

5. The column ProtectFromAccidentalDeletion should be True in all lines.