Accidental object deletion prevention in Active Directory

When creating objects in Active Directory you can set a flag that prevents accidental deletion of an object.

While this setting is visible in the UI by default when creating an Organizational Unit, for other objects like Users, Groups and Computers, this flag is not set by default and can only be set if the Advanced Features are enabled within the Active Directory Users and Computers Console.

image

So assume you would create some important user accounts that are used for critical back-end systems, you should consider enabling the “Protect object for accidental deletion” flag.

image

Once you have this flag set, anyone who would try to delete the user account would receive a message as shown below.

image

Leave a Reply