[Samba] Cant delete OU

Denis CARDON dcardon at tranquil.it
Wed Apr 29 09:49:01 UTC 2020

Hi Basti,

> I want to delete a OU in my Samba AD.
> On RSAT I get "Access denied"
> When I try it with ldapvi I get "dsdb_access: Access check failed on"
> I have also try to repair the samba DB with  samba-tool dbcheck
> --cross-ncs --fix --yes but that does not solve the problem.
> The OU is a self generated one.

what do you mean by "self generated one". If you create a new OU in 
ADUC, it is "protected against deletion" by default using a "Deny all" 
ACL. If you want to delete it you have to remove that ACE entry first.



> Best regards

More information about the samba mailing list