Group Policy Management Access is Denied

Access is denied

I spent all morning chasing an annoying error in Group Policy Management while trying to delete an old unused OU while logged in as Domain Admin: Group Policy Management Access is Denied

Access is denied

I thought I would share the remarkably simple solution here, because I spent all morning following erroneous posts on various sites. Everyone seemed to be pointing to delegation or AD replication or permissions – none of which were the case!

Ultimately, I was unable to delete the OU from Group Policy Management because it was protected in Active Directory Users and Computers (ADUC) where a property was set: Prevent this object from accidental deletion.

Active Directory Users and Computers > Advanced Features > Objects Tab

Here’s the fix:

  1. Open ADUC
  2. In ADUC, got to: View > Advanced Features
  3. Choose the: Object tab
  4. Uncheck: Protect Object from accidental deletion
  5. Right-click on object and: Delete

 

John Borhek

John Borhek (VCP 3-6.5) is the IT Director and Lead Solutions Architect at VMsources Group Inc. and an active consultant specializing in VMware vSphere, Linux, Networking and Infrastructure Design.

Leave a Reply

Your email address will not be published. Required fields are marked *