I have simple requirement to disable/deactivate group in AD. There are plenty of options for AD users & Computers but did not see anything related to groups.

Basically, We want to remove all member from the group and set group to InActive or disabled. I can think of below approach but not sure if it is right way to do it.

Remove-ADGroup is not option in our case due to some security and audit concerns.

1. Remove all members from the group and move group to non-operational OU
2. Remove all members for the group and set enable flag to "false"

Please suggest best way/solution to achieve this.

Thanks