Hello,

Some time ago I delegated rights to the desktop guys to create/delete computer objects on a 2003 domain. That domain has been upgraded to 2008. One of the guys began complaining that he cannot delete computers any longer. Some troubleshooting as shown that only some objects, seemingly older objects, are the trouble. Not all objects pre-migration have the issue however. Members of the delegated security group receive the following error on these trouble objects: You do not have sufficient privileges to delete <computer name>, or this object is protected from accidental deletion..
The delegated security group has rights. Effective rights actually show delete rights. Object protection is not enabled for the objects. My domain admin account can delete the object just fine. Ideas? I'm pretty stumped at the moment.

Any help will be apprecited.

I didn't find the right solution from the Internet.

References:
https://arstechnica.com/civis/viewtopic.php?f=20&t=1142043
Datacenter Management Video

Thank you.