Removing groups from zones

Removing an Active Directory group from a standard zone or RFC 2307-compliant zone requires the following permission:

Select this target object To apply these permissions

The serviceConnectionPoint object for the group account

On the Object tab, select Allow to apply the following permission to this object only:

  • Delete