Delegate permission or set permission to select/unselect "Protect object from accidental deletion"

[Guest MaliStane]

I have delegate permission to group. They can create /modify/delete object inside this OU.I can not solve the issue with how to work reliable enable option “Protect object from accidental deletion” its grey out.

 

Continue reading...

[Trips]

You can try these steps. 

To delegate permissions to a group while protecting an object from accidental deletion, you typically follow these steps in a Windows environment, particularly using Active Directory. Here’s a structured approach:

Steps to Delegate Permissions

1. Open Active Directory Users and Computers (ADUC):

   • Press Windows + R, type dsa.msc, and hit Enter.

2. Locate the Object:

   • Navigate to the organizational unit (OU) or container where the object (like a user, group, or computer) is located.

3. Right-click on the Object:

   • Select Properties.

4. Go to the Security Tab:

   • Click on the Security tab to manage permissions.

5. Add the Group:

   • Click on Add.
   • Enter the name of the group you want to delegate permissions to, and click Check Names to verify.

6. Assign Permissions:

   • Select the group and click on Advanced.
   • Click on Add to create a new permission entry.
   • Select Principal (the group you added).
   • In the Type dropdown, choose Allow.
   • In the Permissions section, check the permissions you want to delegate (like Read, Write, Create, etc.).

Protecting the Object from Accidental Deletion

1. Go to the Object's Properties:

   • While still in the properties of the object, navigate to the Object tab.

2. Check the "Protect object from accidental deletion" Option:

   • Look for the checkbox labeled Protect object from accidental deletion.
   • Check this box to enable protection.

3. Apply Changes:

   • Click OK to apply the changes.

Summary

• Delegated Permissions: Allows the specified group to perform certain actions on the object.
• Accidental Deletion Protection: Prevents the object from being deleted accidentally by users who have permissions.

Note

Make sure to test the configuration to ensure that the permissions are working as intended and that the object is protected from deletion.

Let us know if it helps you.