This utility allows you to enable incremental accounts cache refresh support for a specific domain when the domain access account is not an administrator. If the domain access account does not have read permissions on the Deleted Objects container in the domain, DRA cannot perform an incremental accounts cache refresh.
You can use this utility to perform the following tasks:
Verify that the specified user account or group has read permissions on the Deleted Objects container in the specified domain
Delegate or remove read permissions to a specified user account or group
Delegate or remove the Synchronize directory service data user right to a user account
Display security settings for the Deleted Objects container
You can run the Deleted Objects Utility file (DraDelObjsUtil.exe) from the Program Files (x86)\NetIQ\DRA folder on your Administration server.