Some time ago I delegated rights to the desktop guys to create/delete computer objects on a 2003 domain. That domain has been upgraded to 2008. One of the guys began complaining that he cannot delete ...
Occasionally, I have active directory objects (users, groups) that get moved or deleted. Then management plays a finger-pointing game. We've got it rather restricted who in the admin staff can ...