Microsoft® Windows® Security Resource Kit, Second Edition

Chapter 5. Configuring Security on Active Directory Objects and Attributes

In this chapter:
Understanding the Active Directory Schema	89
Configuring DACLs to Secure Active Directory Objects	92
Securing Active Directory Objects and Attributes	96
Best Practices	100
Additional Information	101

All objects and attributes in the Active Directory directory service are individually secured through the use of discretionary access control lists. Although the default security on Active Directory might be suitable for your organization, you might need to adjust the security of objects or attributes to increase the overall security of Active Directory. You also might need to delegate authority over objects or attributes, or create custom objects and attributes that ...