You have seen how to modify object DACLs using the Security page in the Properties dialog box. Although the Properties dialog box is easy to use, it is not effective for managing DACLs for multiple objects. Making bulk DACL changes in the Properties dialog box is a time-consuming process. Suppose you add a new group and want to add group permissions to the DACLs for a large number of objects. How would you do that without opening each object’s Properties dialog box?
Fortunately, Microsoft provides several tools that make changing DACLs for a group of objects easy. Table 3-5 lists the main ACL management tools and their uses.