Access is denied

Group Policy Management Access is Denied

I spent all morning chasing an annoying error in Group Policy Management while trying to delete an old unused OU while logged in as Domain Admin: Group Policy Management Access is Denied

I thought I would share the remarkably simple solution here, because I spent all morning following erroneous posts on various sites. Everyone seemed to be pointing to delegation or AD replication or permissions – none of which were the case!

Ultimately, I was unable to delete the OU from Group Policy Management because it was protected in Active Directory Users and Computers (ADUC) where a property was set: Prevent this object from accidental deletion.

Active Directory Users and Computers > Advanced Features > Objects Tab

Here’s the fix:

  1. Open ADUC
  2. In ADUC, got to: View > Advanced Features
  3. Choose the: Object tab
  4. Uncheck: Protect Object from accidental deletion
  5. Right-click on object and: Delete


John Borhek

About: John Borhek

John Borhek (VCP 3-6.5) is the IT Director and Lead Solutions Architect at VMsources Group Inc. John has soup-to-nuts experience in Mission Critical Infrastructure and GxP systems, specializing in Datacenter Infrastructure Management (DCIM) and Operational Technology (OT) all over the United States and throughout the Americas.

Leave a Reply

Your email address will not be published. Required fields are marked *