Active directory domain services prevents the unintended deletion of ad objects with the ""protect object from accidental deletion"" setting. Which ad object types have this setting enabled by default?.