Microsoft® Windows® Security: Essentials

Chapter 4

Securing Access with Permissions

Permissions are the primary method of restricting access to resources in a Microsoft domain. You can assign permissions to New Technology File System (NTFS) drives, shares, Active Directory objects, and the Registry.

Many of the permission concepts are the same with the different resources. For example, each can be configured as Allow or Deny, and if the Deny permission is assigned, Deny always takes precedence. Similarly, all permissions can be assigned to a parent and be inherited by all of the children. For NTFS folders and shares, a child is a file or subfolder, but Active Directory and the Registry also contain child objects. This chapter includes these concepts in the following topics:

• Comparing ...