Microsoft® Windows Server 2003: Administrator’s Companion

Implementing Access Control

In the real world, authorization is dictated by policy. When it comes to using resources, reading documents, or accessing rooms, different people have different access rights. The implementation of this policy can be locked safes or badge-access rooms. In the Windows Server 2003 environment, authorization is also based on policy. Different people or groups of people have different access rights. Policy here is implemented through access control. Quite simply, access control determines which users can access which resources. Resources in Windows Server 2003 are described in the following list:

• Files and folders, which can be accessed through Windows Explorer

• Shared volumes, folders, and files, which are allowed permissions ...