Administering Special Permissions

By Author: Mike Jones
Total Articles: 256
Comment this article

Standard permissions are sufficient for most mcitp boot camp administrative tasks. However, you might need to assign or edit special permissions. Special permissions are assigned in the Advanced Security Settings dialog box for the object, -which is accessed by using the Active Directory Users And Computers console.
To assign or edit special permissions for an object, complete the following steps:
1.Click Start, point to Administrative Tools, and then click Active Directory Users And Computers. On the View menu, ensure that Advanced Features is selected.
Right-click the object for which you want to assign or edit special permissions and click Properties.
2.In the Properties dialog box for the object, click the Security tab. Click Advanced.
3.In the Advanced Security Settings dialog box for the mcitp 2008 object, do one of the following:
To set special permissions for an additional security principal or set additional special permissions for an existing security principal, click Add. In the Enter The Object Name To ...
... Select box, type the name of the security principal, and then click OK.
To change the special permissions for the object, click the entry for which you want to change special permissions in the Permission Entries list, and then click Edit.
Note To change permissions, you must be the owner of the object or have been granted permission to do so by the owner.
4.In the Permission Entry dialog box for the object, set or change the desired special permissions in the Object and Properties tabs. Refer to the procedure "To set inheritance for a standard or special permission," on page 9-25 in this lesson, for details on setting inheritance. Click OK.
5.In the Advanced Security Settings dialog box for the object, click OK.
In the Properties dialog box for the object, click OK.
There are two ways to locate Active Directory objects: 1) use the Find option on the Active Directory Users And Computers console, and 2) use the Dsquery command.
The saved queries feature enables administrators to create security+ certification, edit, save, organize and e-mail saved queries in order to monitor or perform a specific task on direc?tory objects.