Effective Permissions Tab Best Practices For Assigning Permissions

By Author: kayla
Total Articles: 127
Comment this article

The following are the best free Microsoft practice tests(http://www.examshots.com/vendor/Microsoft-1.html) for assigning permissions:
Because it is inefficient to maintain user accounts directly, you should assign permissions to groups rather than to users.
Deny permissions sparingly. You should deny permissions only when it is necessary to exclude a subset of a group that has allowed permissions, or to exclude one special permission when you have already granted full control to a user or group. If you assign permissions correctly, you should not need to deny permissions. In most cases, denied permissions indicate mistakes that were made in assigning group membership.
Set permissions to be inheritable to child objects.
Assign Full Control permission, if appropriate, rather than individual permissions.
Caution Always ensure that all objects have at least one user with the Full Control permis¬sion. Failure to do so might result in some objects being inaccessible to the person using the Active Directory Users And Computers console, even an administrator, unless object owner¬ship is changed.
...
...
Assigning Standard Permissions
Standard permissions are assigned in the Security tab in the Properties dialog box for the object, which is accessed by using the Active Directory Users And Computers IT Exams(http://www.buyitexam.com) console.
To assign standard permissions for an object, complete the following steps:
1. Click Start, point to Administrative Tools, and then click Active Directory Users And Computers. On the View menu, ensure that Advanced Features is selected. Right-click the object for which you want to assign permissions and click Properties.


Important You must select Advanced Features on the View menu to be able to access the Security tab and assign standard permissions for an object.

2.In the Properties dialog box for the object, click the Security tab, shown previously in Figure 9-6. Note that the permissions provided in the Properties dialog box are different for each object type. Click Add.
3.In the Select Users, Computers, Or Groups dialog box, type the name of the security principal for which you want to set permissions in the Enter The Object Names To Select box, then click OK.
4.In the Permissions For Security Principal box, select the Allow check box or the Deny check box for each permission you want to add, change, or deny. Refer
to the procedure "To set inheritance for a standard or special permission," on page 9-25 in this lesson, for details on setting inheritance. Click OK.

Standard permissions are sufficient in a MCSA Certification(http://www.mcsa-70-290.com) for most administrative tasks. However, you might need to assign or edit special permissions. Special permissions are assigned in the Advanced Security Settings dialog box for the object, which is accessed by using the Active Directory Users And Computers console.
Deny permissions sparingly. You should deny permissions only when it is necessary to exclude a subset of a group that has allowed permissions, or to exclude one special permission when you have already granted full control to a user or group. If you assign permissions correctly, you should not need to deny permissions. In most cases, denied permissions indicate mistakes that were made in assigning group membership.