Windows Server® 2012 Unleashed

Creating DAC Claim Types

At the heart of the DAC infrastructure is the claims that will be made available to present options for folder classification and processing access requests. To create a new DAC claim type, follow these steps:

1. Log on to a Windows Server 2012 domain controller with an account in the Domain Admins and Enterprise Admins security groups.

2. Open Server Manager, click Tools, and open the Active Directory Administrative Center console.

3. When the console opens, in the tree pane on the left, click Dynamic Access Control, and in the center pane, double-click Claim Types.

4. In the Tasks pane, click New Claim Type.

5. When the Create Claim Type window opens, scroll down in the Source Attribute list and locate the source attribute ...