FIX: Object Is Protected From Accidental Deletion. You Do Not Have ...

Author: Konstantinos Tsoukalas , Last updated: May 12th, 2025

If you try to delete an OU or an object in Active Directory, and you receive the error "You do not have sufficient rights or object is protected from accidental deletion", continue reading below. The error "You do not sufficient privileges to delete this object, or this object is protected from accidental deletion" may occur in Active Directory for the following reasons:

  1. The AD user you use to delete the object does not have enough permissions to make changes on the Active Directory. (e.g. doesn't belong to "Domain Admins" Group.)
  2. The object you try to delete (e.g. OU, Group, User), is protected from accidental deletion.
  3. A Virus or other program has modified the default permissions on the object you try to delete.

FIX: Object is Protected from Accidental Deletion or You do not have Sufficient Privileges to Delete OU

How to FIX: You do not have Sufficient privileges to delete OU, or Object is protected from accidental deletion on Active Directory Server 2008, 2012 & 2016.

Method 1. Un-Protect Object from Accidental Deletion. *

* Important: Make sure that the AD user you use to delete the object, is a member of Domain Admins group.

1. Open Active Directory Users and Computers 2. From View menu, click Advanced Features.

How to Find Last Password Change in Active Directory Server 2016

3. Right-click on the object that you want to delete and select Properties.

Object Properties

4. Uncheck the Protect object from accidental deletion checkbox and click OK. *

* Note: If the checkbox is already unchecked proceed to method-2.

Un-protect object from accidental deletion

5. Try to delete the object now. If you still receive the error, proceed to method-2.

Method 2. Restore the Default Permissions on the Object.

1. Open Active Directory Users and Computers 2. From View menu, click Advanced Features.

3. Right-click on the object that you cannot delete and select Properties. 4. Select the Security tab and click Advanced.

Security Permissions

5. At 'Advanced Security Settings', click Restore Defaults.

Restore Default Security Permissions

6. Click OK twice to close the object's properties. 7. Delete the object.

That’s it! Let me know if this guide has helped you by leaving your comment about your experience. Please like and share this guide to help others.

If this article was useful for you, please consider supporting us by making a donation. Even $1 can a make a huge difference for us in our effort to continue to help others while keeping this site free:
  • Author
  • Recent Posts
Konstantinos Tsoukalas Konstantinos TsoukalasKonstantinos is the founder and administrator of Wintips.org. Since 1995 he works and provides IT support as a computer and network expert to individuals and large companies. He is specialized in solving problems related to Windows or other Microsoft products (Windows Server, Office, Microsoft 365, etc.). Konstantinos Tsoukalas Latest posts by Konstantinos Tsoukalas (see all)
  • How to Sync Local Active Directory Users & Devices to Microsoft Entra ID (Hybrid Join) - February 25, 2026
  • How to Sync Microsoft 365 Global Address List with the iOS native Contacts app (iPhone) - February 17, 2026
  • FIX: Outlook Displays German Umlauts as Question Marks or Weird symbols after sending. (Solved) - February 12, 2026

Tag » Active Directory Protect Against Accidental Deletion