active directory -grant permission to undelete user only move and create

Question

I try to give user permission in an active directory to create users and move between them, but do not delete them. When I delegate control to some group, I do not have the option to undelete users.

Answer 1

Use Delegation of Control Wizard. This can be VERY granular. More at https://learn.microsoft.com/en-us/answers/questions/973272/delegate-help-desk-users-permission-to-move-users

---

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

Answer 2

Hi @jihad majed

There is no undelete permission but you can select delete permission and choose deny.

In target OU , go to security Tab then click on advanced to be able to add or edit custom permission:

---

Please don't forget to accept helpful answer