All OUs in this domain should be protected from accidental deletion

All OUs in this 领域 should be protected from accidental deletion.

All OUs in this 领域 should be protected from accidental deletion.

严重程度: Warning

Problem: Some organizational units (OUs) in this 领域 are not protected from accidental deletion.

Impact: If all OUs in your 活动目录 domains are not protected from accidental deletion, 你的 活动目录 environment can experience disruptions that might be caused by accidental bulk deletion of objects.

解决:Make sure that all OUs in this 领域 are protected from accidental deletion.

Best Practices Analyzer

With Active Directory Users and Computers console

To “protect an OU from accidental deletion”, 执行以下操作:

1. 打开 活动目录 用户和计算机 安慰;
2. Right click the OU that you want to protect from accidental deletion, 然后单击 特性;
3. Go to the tab Object, check “Protect object from accidental deletion” and click 好的.

笔记: If you don’t see the Object tab you must enable Advanced Features. 在 活动目录 用户和计算机, console click 看法 并选择 Advanced Features.

With Windows PowerShell

1. 跑步 Windows PowerShell as Admin 在 领域 控制器;

2. Type the following to list all OU’s where the option “Protect object from accidental deletion” is disabled:

Get-ADOrganizationalUnit -filter * -Properties ProtectedFromAccidentalDeletion | 在哪里 {$_.ProtectedFromAccidentalDeletion -eq $false} | ft

3. Enter the following command in 电源外壳:

Get-ADOrganizationalUnit -filter * -Properties ProtectedFromAccidentalDeletion | 在哪里 {$_.ProtectedFromAccidentalDeletion -eq $false} | Set-ADOrganizationalUnit -ProtectedFromAccidentalDeletion $true

4. To verify all OU’s are modified, enter this command in 电源外壳:

Get-ADOrganizationalUnit -filter * -Properties ProtectedFromAccidentalDeletion | 在哪里 {$_.ProtectedFromAccidentalDeletion} | ft

5. The column ProtectFromAccidentalDeletion should be True in all lines.