Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We made the mistake of Delegating Control over an OU to a user rather than a group.

We would like to correct this by removing the user from the OU's delegated control, but can't find where to modify this.

We can't even find the list of users who have received delegate control over the OU.

How do we get to this in Active Directory?

share|improve this question
up vote 7 down vote accepted

Within Active Directory Users and Computers (ADUC), go to View and select Advanced Features. Then right click on the OU you'd like to edit and choose Properties, select the Security tab, and then remove the user you accidentally delegated rights to.

share|improve this answer
+1. You're earning a lot of 1 ups today, Curt. The method you describe is the only way I know to remove permissions for a user\group that's been delegated control. – joeqwerty Nov 24 '10 at 0:07
Thanks for the +1. I'm trying to get some points to offer as a bounty for a question that I have that hasn't been answered. – CurtM Nov 24 '10 at 0:21

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.