123ArticleOnline Logo
Welcome to 123ArticleOnline.com!
ALL >> Computer-Programming >> View Article

Controlling Access To Active Directory Objects

Profile Picture
By Author: kayla
Total Articles: 128
Comment this article
Facebook ShareTwitter ShareGoogle+ ShareTwitter Share

The Windows Support Tools include the IT certification(http://www.buyitexam.com) and SDCheck utility, introduced in Chap¬ter 3. You can use this utility to diagnose permission inheritance and permission replication issues. For example, if you run the command sdcheck serverl administrator@contoso.com, you'll receive a list of permissions assigned to the Administrator account of the con-toso.com domain according to Serverl. If you run the command sdcheck server2 admin-istrator@contoso.com, you'll see the same output according to Server2. You can compare the two results in an attempt to locate a discrepancy. In order to make the comparison more easily, you can use a file comparison utility, such as Windiff.exe, which is also part of the Windows Support Tools. In that case, you'd ensure the output of the SDCheck commands went to a file by adding > filename.txt to the end of the command. If you find a discrepancy, this may be an indication that there is something wrong with the replication process. For additional examples of how to use SDCheck, perform a Web search on "SDCheck examples."

For example, as shown in Figure ...
... 9-8, if you assign Full Control permission to the Sales group for the Fast OU, the permission can be propagated to the free CompTIA practice tests(http://www.examshots.com/vendor/CompTIA-4.html) of the East OU, the Chicago and Columbus OUs, and their respective child objects, a shared folder named Account Information, and two users. Therefore, permissions for the Sales group in the East OU are explicit permissions, while the permissions for the Sales group in the OUs, shared folder, and users are inherited permissions.
Permissions set for the parent objects can be inherited by child objects.

After you set permissions on a parent object, child objects created in the parent object can inherit these permissions. There are three indicators of inherited permissions:
Shaded permissions check boxes These check boxes are located in the Secu¬rity tab in the Properties dialog box for an object, shown previously in Figure 9-6, and in the Permission Entry dialog box for an object, shown previously in Figure 9-7.

If a permission is inherited, a permissions check box is shaded. However, shaded special permissions check boxes do not indicate inherited permissions. These shaded check boxes merely indicate that a special permission exists.
The Inherited From column This column is located in the Permission Entries list in the Advanced Security Settings dialog box for an object, shown in Figure 9-9-If a permission is inherited, the distinguished name of the parent object is dis¬played. This is a new feature in Windows Server 2003.
Unavailable Remove button for a permission This button is located in the Advanced Security Settings dialog box, shown in Figure 9-9- If a permission is inherited, the Remove button is unavailable, because the permission must be removed at the parent object.

After you set permissions on a parent object, child objects created in the parent object can inherit these permissions. There are three indicators of inherited permissions:
Shaded permissions check boxes These check boxes are located in the Secu¬rity tab in the Properties dialog box for an object, shown previously in Figure 9-6, and in the Permission Entry dialog box for an object, shown previously in Figure 9-7.

The Inherited From column of 70-299 Exam(http://www.mcse-70-299.com) is located in the Permission Entries list in the Advanced Security Settings dialog box for an object, shown in Figure 9-9-If a permission is inherited, the distinguished name of the parent object is dis¬played. This is a new feature in Windows Server 2003.Unavailable Remove button for a permission This button is located in the Advanced Security Settings dialog box, shown in Figure 9-9- If a permission is inherited, the Remove button is unavailable, because the permission must be removed at the parent object.

Total Views: 391Word Count: 610See All articles From Author

Add Comment

Computer Programming Articles

1. Metaverse Gaming: How Blockchain Will Power The Next Virtual Worlds
Author: Severus Snape

2. Building Smarter Businesses With Mobile App Development At Nij Web Solution
Author: app development

3. Building A Scalable Flutter App With Microservices Architecture
Author: Andy

4. The Future Of Crypto Exchanges: Ai, Web3, And Decentralized Finance (defi)
Author: Severus Snape

5. How Early Autism Treatment Can Make A Big Difference
Author: John mathew

6. Top 7 Data Science Training In Bhopal Every Aspiring Analyst Should Know
Author: Kabir Patel

7. Unlocking Growth Through Mobile App Development: How Strategic Enterprise Solutions Drive Roi And Digital Transformation
Author: hayden

8. Transforming Business With Azure Ai: A Comprehensive Overview Of Services & Solutions
Author: ECF Data

9. How Warehouse Management Software Helps Businesses To Speed Up Delivery?
Author: logitrac360

10. Future Of Technology With Ai & Ml Services
Author: Dynamics

11. Top 5 Benefits Of Using React Native For Cost-effective Mobile App Development
Author: Andy

12. Why Students Prefer The Data Science Training In Bhopal For A Bright Future
Author: Rohan Rajput

13. Codeigniter Tutorial Guide: From Installation To Advanced Development
Author: Tech Point

14. Laravel Tutorial: A Beginner’s Guide To Modern Php Framework
Author: Tech Point

15. Best Data Science Training In Bhopal To Kickstart Your Data Career In 2025
Author: Rohan Rajput

Login To Account
Login Email:
Password:
Forgot Password?
New User?
Sign Up Newsletter
Email Address: