All OUs in this domain should be protected from accidental deletion.
All OUs in this domain should be protected from accidental deletion.
mức độ nghiêm trọng: Cảnh báo
Problem: Some organizational units (OUs) in this domain are not protected from accidental deletion.
Impact: If all OUs in your Active Directory domains are not protected from accidental deletion, your Active Directory environment can experience disruptions that might be caused by accidental bulk deletion of objects.
Nghị quyết:Make sure that all OUs in this domain are protected from accidental deletion.
Best Practices Analyzer
With Active Directory Users and Computers console
ĐẾN “protect an OU from accidental deletion”, làm như sau:
- Mởkích hoạt các người dùng và máy tính bảng điều khiển;
- Right click the OU that you want to protect from accidental deletion, và bấm vàoCủa cải;
- Go to the tabObject, kiểm tra “Protect object from accidental deletion” và bấm vàoĐƯỢC RỒI.
GHI CHÚ: If you don’t see the Object tab you must enable Advanced Features. In the Active Directory Users and Computers, console click Xem và chọn Các tính năng tiên tiến.
With Windows PowerShell
1. Chạy Windows PowerShell as Admin on Domain Controller;
2. Type the following to list all OU’s where the option “Protect object from accidental deletion” is disabled:
Get-ADOrganizationalUnit -filter * -Properties ProtectedFromAccidentalDeletion | where {$_.ProtectedFromAccidentalDeletion -eq $false} | ft
3. Enter the following command in PowerShell:
Get-ADOrganizationalUnit -filter * -Properties ProtectedFromAccidentalDeletion | where {$_.ProtectedFromAccidentalDeletion -eq $false} | Set-ADOrganizationalUnit -ProtectedFromAccidentalDeletion $true
4. To verify all OU’s are modified, enter this command in PowerShell:
Get-ADOrganizationalUnit -filter * -Properties ProtectedFromAccidentalDeletion | where {$_.ProtectedFromAccidentalDeletion} | ft
5. The columnProtectFromAccidentalDeletion should beĐÚNG VẬY in all lines.