How to Cheat at Securing SQL Server 2005

Appendix B: Securing Active Directory

Solutions in this chapter:

■ Designing an Access Control Strategy for Directory Services

■ Designing the Appropriate Group Strategy for Accessing Resources

☑ Summary

☑ Solutions Fast Track

☑ Frequently Asked Questions

Introduction

All network access begins with one thing: a user account. You can grant network access to an individual user account, or to a group object that contains multiple accounts; whether it’s a user or a group object, anything that you use to assign permissions is called a security principal. You will use security principals on your network to assign permissions to network resources such as file shares and folders, and rights assignments such as “Log on interactively” and “Backup files and folders.” ...