Contact info for Tech Philly
Home  •  Contact  •  Services  •  Support

            Tech Solutions

PC Upgrades Upgrades
Data Recovery Data Recovery
Computer Repair, Maintenance, and update Maintenance
Security From Viruses, Hackers, and Spyware Security
Network Solutions Networks
Website Search Engine Optimization Google Rank Increase Websites
Computer Repair Philadelphia Gateway Compaq Custom Systems

  • Location Service
  • 24/7 Help

Philadelphia Computer Tech Support

01 - 02 - 03 - 04 - 05 - 06 - 07 - 08 - 09 - 10 - 11 - 12 - 13 - 14 - 15 - 16 - 17 - 18 - 19 - 20 -

Active Directory Object Permissions
Permissions can be applied to any object in Active Directory, but the majority of permissions should be
granted to groups, rather than to individual users. This eases the task of managing permissions on objects.
You can assign permissions for objects to:
Groups, users, and special identities in the domain
Groups and users in that domain and any trusted domains
Local groups and users on the computer where the object resides
To assign Active Directory permissions to a directory object, do one of these things:
1. Open the Active Directory Domains and Trusts tool by following this path: Start | Programs |
Administrative Tools | Active Directory Domains and Trusts. Right-click the selected domain and
choose Manage.
2. Open the Active Directory Users and Computers tool directly, and expand the tree for the domain
you wish to manage.
3. In the View menu, be sure Advanced Features is checked (see Figure 4.6.
If the Advanced Features selection is not checked, you will not see the Security tab in the next step.
Figure 4.6 The Advanced Features option on the View menu must be selected in order to set Active
Directory permissions on an object.
4. Now choose an Active Directory object and right-click it, then select Properties.

Active Directory permissions can be fine-tuned to an extraordinary degree. But remember, especially as you
begin to deploy your security plan using Windows 2000s new features, that just because you can do
something, this does not mean you should do it.
Although Windows 2000 gives you the ability to assign Active Directory permissions not only to objects
themselves but to their individual attributes, Microsoft recommends in general that you should not grant
permissions for specific object attributes, because this can complicate administrative tasks and disrupt
normal operations.

01 - 02 - 03 - 04 - 05 - 06 - 07 - 08 - 09 - 10 - 11 - 12 - 13 - 14 - 15 - 16 - 17 - 18 - 19 - 20 -

  Home Contact Data Recovery Search Engine Web Design/Hosting Networks

Serving the Philadelphia area with the best in tech service and support.

Tech Philly Custom Systems Data Recovery Emergency Service Maintenance Network Service Onsite Service Repair Security Software Spyware Upgrades Viruses Website Design Website Hosting Wireless Computer