Using Object Permissions to Control Access

Object permissions determine the type of access that is granted to an object or an object property. Objects are files, folders, registry keys, printers, and Active Directory objects. The type of access granted is dependent on the type of object. File permissions, for example, include permissions such as read, write, execute, and delete, while Active Directory object permissions might include things such as Reset Password, Create Object, or Modify the Membership of a Group. This chapter includes a general discussion about how permissions are defined and how inheritance affects permissions, and it includes an example of defining printer permissions.

Object permissions on Active Directory objects often ...

Get Windows Server 2003 Security: A Technical Reference now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.