You can delete Active Directory groups with the Active Roles Console.
To delete a group
-
In the Console tree, locate and select the folder that contains the group you want to delete.
-
In the details pane, right-click the group, then click Delete.
NOTE: Consider the following when deleting a group:
-
Deleting a group is a destructive operation that cannot be undone. Once a group is deleted, all permissions and memberships associated with that group are lost. Creating a new group with the same name as the deleted group does not automatically assign the permissions and memberships of the previously deleted group. Instead, you must manually re-create all permissions and memberships.
-
The confirmation message box displayed by the Delete command prompts you that you can deprovision rather than delete groups. The deprovision operation refers to a set of actions performed by Active Roles in order to prevent the use of there group. Active Roles comes with a default policy to automate some commonly-used deprovisioning tasks, and allows the deprovision policies to be adjusted as needed.
-
To deprovision a group, right-click the group in the details pane, and click Deprovision.
-
To locate groups for deletion or deprovisioning, use the Find function of Active Roles. Once you found the groups, delete or deprovision them by selecting the accounts in the list of search results, right-clicking the selection, and clicking Delete or Deprovision.
-
When attempting to delete a group, you may receive an error message that access is denied to the group. This can typically occur if the group is protected from deletion. To remove this protection, navigate to the Properties > Object tab of the group you want to delete, then clear the Protect object from accidental deletion check box. After that, try deleting the group again.