Major Access Control Changes in Windows Server 2008
Windows Server 2008, and Windows Vista, introduce a few changes to access control over prior versions of Windows. A couple of these changes are quite subtle, but two will be very important to many administrators. Let us start by looking at the subtle ones.
TrustedInstaller Permissions
Many objects in Windows, as you saw earlier, are now owned by the TrustedInstaller service. This means that even administrators will find plenty of objects that they cannot modify without first changing the permissions on them. As an administrator, you are never quite completely locked out, of course, but you will almost certainly at some point run into a situation where you try to modify an object and get an access ...
Get Windows Server® 2008 Security Resource Kit now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
