ALL >> System-Network-Administration >> View Article
How Active Directory Object Permissions Can Aid Security
To understand how Active Directory object permissions can aide security, you can study the effect of MCSE 2003 exams object permission changes on an OU object. OUs contain user and computer accounts, among other objects, and any permissions set on OUs can affect the management and security of the computer accounts and user accounts that reside in the OU. Examining the available permissions can help you determine how to design a permission infrastructure that will do the best job at increasing security. Open the Security Property page (shown in Figure 9-13) of any OU object in Active Directory Users and Computers. As it does for files and folders, this page presents a broad list of permissions. These permissions, like similar ones for files and folders, are actually composite permissions.
In addition to using the object editor to change Active Directory permissions or using the Delegation Of Authority Wizard, you have three additional ways that these permissions can be modified. You can use the dsacls command.You can also use the ADS-lEdit tool (Adsiedit.msc) or programmatic methods ...
... to edit Modify permissions on MCSE study guides free download Active Directory objects.
To explore the permissions behind Full Control, for example, click the Advanced button, and then click the Edit button. Two additional pages of permissions are dis?played, one labeled Object and the other labeled Properties. The object page (shown in Figure 9-14) is a list of over 70 permissions that define access to these types of objects if they are present within the OU. The Property page displays a list of more than 70 permissions and defines access to the properties of objects within the OU container. Table 9-2 lists some permissions of each type and provides information about how they might be used. The first seven permissions represent the comprehensive permissions on the first security page. (Six are visible in the figure.)
One question remains. What "will be the effect if multiple objects exist in the inheritance path and each object provides permissions that are inherited? Figure 9-9 shows a multiobject inheritance path. It also indicates two permissions set at each level. For purposes of simplification, assume that inheritance is not blocked at any level and that all permissions applied at each level are inherited by the MCITP study guides free download file quarterlyreport.doc. Will John be able to read the file or not?
Add Comment
System/Network Administration Articles
1. Why Smoad Networks Is The Best Choice For Sim-based Wifi RoutersAuthor: HubraSEO
2. The Value Of Canada Ul Pcbs: Ensuring Safety And Compliance
Author: Ryan
3. Sap And Msap In Flexible Circuit Fabrication
Author: Ryan
4. Get Deeper Into The Insights Of Aluminum Nitride Pcb (aln Pcb)
Author: Ryan
5. The Essential Guide To Multilayer Pcbs: Design, Manufacturing, And Benefits In Modern Electronics
Author: Ryan
6. Backplane Pcbs: Characteristics, And Design Considerations For High-speed Data Transmission
Author: Ryan
7. Fiber Polishing Film: Master Optical Connectivity
Author: James
8. Delve Into The Basics Of Armored Fiber Optic Patch Cords
Author: Ryan
9. An Overview Of Lc And Sc Fiber Optic Connectors
Author: Ryan
10. Get Deeper Into The Facts About Fiber Optic Cable Cutting Machine
Author: James
11. Optical Switch And Why Is It Preferred
Author: James
12. High Volume Pcb Manufacturing: Efficiency And Scale
Author: James
13. Know About The Utilizes Of Led Pcbs
Author: James
14. Go More Into The Details Of Led Pcb China
Author: James
15. Enhancing Connectivity: Smoad Networks' Creative Solutions For Individuals And Businesses
Author: HubraSEO