Permissions required for the DSA Account - Missing the revoking of the 'ownership' in the script

Curious_Kevin16 

Yes, you can keep the ownership of the deleted object container. It has no impact on the permissions.

If you want to remove the permissions you assigned, you can run the following two 2 lines instead of the two prior ones:
$params = @("$deletedObjectsDN", '/R', $Identity)
C:\Windows\System32\dsacls.exe $params

I'll update the public documentation to include them as well.