MCITP Windows Server® 2008 Server Administrator: Study Guide

5.2. Active Directory Rights and Permissions

Windows Server 2008 includes many built-in groups. By adding a user to the group, you grant the user all the rights and responsibilities of that group. Understanding the groups available can go a long way to easing your job as an administrator. If you know which groups are available, you can quickly and easily grant someone the appropriate rights and permissions to do a job.

Further, by knowing the available groups, you know when a group is available to do a job and when you need to add groups to fulfill specific requirements.

Real World Scenario: Principle of Least Privilege Most organizations follow the basic security principle of "least privilege." In other words, you grant users only what is ...