O'Reilly logo

Special Edition Using Microsoft Active Directory by James Hudson, Sean Fullerton

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Modifying Permissions

The default permission structure of Active Directory is a great start to a secure network. However, day-to-day maintenance of the enterprise requires modifying permissions by creating and deleting groups, adding and subtracting members from groups, and adding and subtracting permissions from objects. This section looks at some examples of modifying permissions.

Let's first look at modifying permissions by using the Security tab of the Properties page of the object in the Active Directory Users and Computers MMC Snap-in. This allows a very granular approach to maintaining levels of privilege. Then, you will use a new tool in the Active Directory—the Delegation of Control Wizard—to allow en masse granting of permissions to ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required