Wow, second one today. It apparently has one or more subordinate objects,
and the MMC does not use the LDAP control to delete a subtree... It just
does a simple LDAP delete, which will not delete a subtree.  Use LDP or
ADSIEdit to delete the GPO and its subordinate obejcts.

-gil

-----Original Message-----
From: Todd Povilaitis [mailto:[EMAIL PROTECTED]] 
Sent: Tuesday, September 24, 2002 1:11 PM
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Unable to delete unwanted GPO



I have a GPO that I set up for testing a software deployment quite awhile
back.  It is not linked to any OU, yet even the domain admin account cannot
delete it.  I receive a message stating "Failed to delete the Group Policy
Object.  You may not have appropriate rights."  It goes on further to
explain the Details: "The directory service can perform the requested
operation only on a leaf object".  Any ideas...
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to