We have a situation where we need to deny domain admins from resetting passwords of users in a specific OU...
This is not a regular request.. Any idea?
You can do this by enabling advanced settings, and then right clicking on the OU and going to properties then security then advanced and configure Domain Admins with a deny for the password reset option
Word of warning i would suggest not denying domain admins, if there is a group of people in the domain admin group who you dont wish to do this then add them to a group and deny that group access
Pretty sure you can do this if you adjust delegation for this ou.