Chapter 20. What Is a Group?

Most developers have a basic idea of what a security group in Windows is all about. It's a way to simplify administration by grouping users together. In a large system, a clearly defined group can allow an administrator to assign permissions for hundreds of files, registry keys, directory objects, and so on, without having to think about each individual user that will be in the group to which he's granting permission. Similarly, when managing the group membership list, the administrator doesn't have to remember each and every resource to which the group has access. By clearly defining the semantics of the group, he can manage a more complex system than would otherwise be possible.

It would be nice if that were all there ...

Get The .NET Developer's Guide to Windows Security now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.