I have users that need all right to an OU but I do not want to give the
supervisor rights.

The problem I’m having is by giving them everything but supervisor they
have the ability to go in and edit there assigned rights under “trustee of
this object” and give themselves supervisor rights, how do I stop this?