We made the mistake of Delegating Control over an OU to a user rather than a group.
We would like to correct this by removing the user from the OU's delegated control, but can't find where to modify this.
We can't even find the list of users who have received delegate control over the OU.
How do we get to this in Active Directory?
Best Answer
Within Active Directory Users and Computers (ADUC), go to View and select Advanced Features. Then right click on the OU you'd like to edit and choose Properties, select the Security tab, and then remove the user you accidentally delegated rights to.