Friday, 16 January 2015

Failed to Delete / Move Organizational Unit in Active Directory

I think I rarely touch about Active Directory, so let's start with a basic one. Let say, one day you want to housekeep your OU structure, delete or maybe move some OUs to different locations, but you got an error :

You do not have sufficient privilages to delete <OUName>, or this onject is protected from accidental deletion.


Windows cannot move object <OUName> because:

Access is denied.

Well, if we look at the first error, it is clear cut, the object is protected from accidental deletion, so the object needs to stay there. Whereas for second error, it just mentioned "access is denied". 

Issues :

  • Can't delete or move OU, either one of above errors prompted.


  1.  Right click at the target OU, and click at Properties

Friday, 9 January 2015

How To Hide Windows Local Disk Drives From Users

In some organizations, Management may want to hide certain server local drives from being accessed by Citrix users. There are a few methods to do so, but in this post, we will be using GPP. 

Note that this step will only HIDE but not prevent users from acecssing to it. The configured drive will only be hide from WIndows Explorer. Thus, users still can access to the drive via Command prompt, Run command etc.

Description :
Hide certain drives from being accessed by users.

How To Do :

  1.  Launch Group Policy Management Console. Depending on how your AD is structured, right click at the OU, and choose " Create a GPO in this domain, and Link it here... "

  2.  Give it a name, and press OK.

  3.  Then you can see the GPO created.

  4.  Right click at the GPO, and choose Edit.

  5.   Expand to User Configuration > Preference > Windows Settings, click at Drive Maps

  6.  Right click at Drive Maps, hover to New and click at Mapped Drive

  7.  In here, follow below instructions:
    Action : Update
    Drive Letter : Existing, and choose desired drive (in this example, it is D: drive

    Press Apply and OK.