Win Server 2008 Active Directory Users And Computers

[massawa]

Hi, guys how are you doing? i am a new user and a little about me i am originally from Ethiopia but i live and work in KSA. and my job is network administrator. and actually, i am familiar with win sever 2003 and working on it. recently, my manager told me to up grade the server to win server 2008. however, i have to be familiar with it before proceeding directly to the deployment. some how, i installed the win server 2008 in my stand alone machine and becomes my first DC, joined to the network and am checking now. right now, i have started to manage AD DS but unlike win2k3, it is complicated for me with so many security. but i think i solved some problems using Group Policy management. what i did is just i created new GPO, and linked it and the GPO status is enforced and enabled and in the domain controller also linked an existing GPO and in default domain controllers policy, right click Edit then computer and user configuration and then disabled the password policy. And made "GPUPDTE" What i found the result is that I can create and delete users and computers.

right now, the problem is I can not move or delete departments which i created from OU. so, i think there is something is still missing to configure.

the message says " you don't have sufficient privilege to delete objects or this object is protected from accidental deletion."

 

please guys i need your help