How to Safely Delete an Organizational Unit in Active Directory

Text graphic displaying 'Delete Organizational Unit' next to data storage server racks.

An organizational unit (OU) is a container within the Active Directory in which you can place users, groups, computer objects, and even nested OUs. You can create organizational units to mirror your organization’s functional or business structure. In this article, I will show you How to delete Organizational Unit in Active Directory. For some related content on Active Directory, see the following guides. Active Directory Authentication methods: Kerberos and NTLM, Concept of AD Computer Account, and how to install RSAT on Windows 10.

OU owners are data managers who control a subtree of objects in Active Directory Domain Services (AD DS). See the following article on how to create a contact in AD.

Active Directory is a directory system from Microsoft that can be installed on Windows Server. Active Directory is used by companies to store objects such as computers, users, groups etc in an AD environment. With the help of a directory system, the objects can be managed centrally and can grant access to other resources such as the file server.

Please see How to Create and Find Organisation Unit Paths in AD, how to Create Organisation Units, Service Accounts, and Active Directory Security Groups, and How to detect who disabled a user in Active Directory-Best Monitoring Tools and Software.

Delete a Container in Active Directory

To delete a container or OU, please follow the steps described below. Login to your domain controller or use RSAT. See some articles on RSAT. Navigate to Start, Administrative Tools, and Active Directory Users and Computers.

Alternatively, you can also launch this from the Tools menu under Server Manager. Locate the Organisation Unit you wish to delete. I will first try to delete it without disabling the protection so you could see the kind of error it will prompt.

Screenshot of the Active Directory Users and Computers interface in Server Manager, showing a context menu with the 'Delete' option highlighted.

Click on Yes. It will through an error afterwards because the OU is protected.

Active Directory Users and Computers window displaying a warning prompt about deleting the Organizational Unit named 'Service Accounts' with 'Yes' and 'No' options.

Please see how to Delete or Rename and Create a Protected Organisation Unit in AD, and How to add or delete users and set permissions in Azure Active Directory.

How to remove Protected OU in AD

As we can see, the OU cannot be deleted. This is because it is protected against accidental deletion.

Error message in Active Directory displaying insufficient privileges to delete Service Accounts.

To fix this issue, click on View on the menu bar, and then click on Advanced Features.

Menu options in Active Directory Users and Computers, highlighting the 'View' section with 'Advanced Features' selected.

Uncheck the Protect against accidental deletion

Navigate to the OU that you want to delete. Right-click on it and click on Properties. Now right-click on the OU and select the properties

Under the object tab, uncheck the "Protect against accidental deletion"

Active Directory Service Accounts Properties window showing details about the object including its canonical name, creation and modification dates, and an option to protect the object from accidental deletion.

As you can see, it has been unchecked “Protect from accidental deletion”.

Screenshot of Active Directory Users and Computers showing the properties of a service account, including its canonical name, creation and modification dates, object class, and an option to protect the object from accidental deletion.

Now proceed to delete the container once more. This time, no error message will be prompted.

Active Directory Users and Computers interface showing a confirmation dialog for deleting the Organizational Unit named 'Service Accounts'.

As we can see below, the OU has been deleted.

Screenshot of Active Directory Users and Computers interface displaying saved queries, domain structure, and container categories like Builtin, Computers, and Users.

I hope you found this blog post helpful on How to delete Organizational Unit in Active Directory. If you have any questions, please let me know in the comment session.