Highlighted
Expert
Expert

AD Accidental Delete flag

Is there any way to clear the accidental delete flag in AD?  I want to delete a computer object but the accidental delete flag is set on it.  I need to clear the flag and then delete it.  I have looked at the attributes for the AD_Computer object, but can not find any reference to it.  To see it in the AD Users and Computers tool, you need to turn "Advanced Features" on, in the view menu.  Then in the computer Properties, select the object tab.

Thanks,
Carl L.

0 Kudos
4 Replies
Highlighted
Expert
Expert

I take it that there is no way to do this then.  Despite the fact that this is a MS best-practice.

Oh well 😞

Carl L.

0 Kudos
Highlighted
Expert
Expert

OK.  Put in an SR on it and a Feature request.

Carl L.

0 Kudos
Highlighted
VMware Employee
VMware Employee

Thanks. I looked at the currently available API but couldn't find an obvious way to access this flag.

I suppose it will take some time to figure out where this flag is stored inside AD properties, and working on it as part of SR/FR sounds like the proper way to handle it.

0 Kudos
Highlighted
VMware Employee
VMware Employee

Hm

AD plugin comes with generic  LDAP client that will allow modifying  arbitrary entity in ActiveDriecotry server.

Active Directory plugin 3.0.0 - New and Noteworthy

Still as @ilian mentioned it is not clear what exactly need to be updated

Here is a bit of doc from Microsoft

What is AD attribute of Protect Delete of OU and user ?

System-Flags attribute - Windows applications | Microsoft Docs

Protect an Organizational Unit from Accidental Deletion | Microsoft Docs

0 Kudos