Greetings, I would like to stop Account Operators from being able to enable
user accounts residing within a particular OU. I have tried adding the deny
permission for the "Write userAccountControl" property for user objects for the
Account Operators group. The effective permissions continue to show full
control, however. I must be missing something basic, but cannot locate it.
~ NEW: CounterSpy Enterprise: Centralized Antispyware - #1 in eWEEK Test! ~
~ <http://www.sunbelt-software.com/product.cfm?id=400> ~
