con_subtree_delete_objects for windowscomputer should be configurable via UCR.
The elements of con_subtree_delete_objects are used as LDAP filters, so some form of validation would be "nice to have".