Is there any way to clear the accidental delete flag in AD? I want to delete a computer object but the accidental delete flag is set on it. I need to clear the flag and then delete it. I have looked at the attributes for the AD_Computer object, but can not find any reference to it. To see it in the AD Users and Computers tool, you need to turn "Advanced Features" on, in the view menu. Then in the computer Properties, select the object tab.
Thanks,
Carl L.
I take it that there is no way to do this then. Despite the fact that this is a MS best-practice.
Oh well 😞
Carl L.
OK. Put in an SR on it and a Feature request.
Carl L.
Thanks. I looked at the currently available API but couldn't find an obvious way to access this flag.
I suppose it will take some time to figure out where this flag is stored inside AD properties, and working on it as part of SR/FR sounds like the proper way to handle it.
Hm
AD plugin comes with generic LDAP client that will allow modifying arbitrary entity in ActiveDriecotry server.
Active Directory plugin 3.0.0 - New and Noteworthy
Still as @ilian mentioned it is not clear what exactly need to be updated
Here is a bit of doc from Microsoft
What is AD attribute of Protect Delete of OU and user ?
System-Flags attribute - Windows applications | Microsoft Docs
Protect an Organizational Unit from Accidental Deletion | Microsoft Docs