Removing The Special Permissions

By Author: iris
Total Articles: 286
Comment this article

If necessary, you can remove special permissions from an Server+ object in the Security tab in the Advanced Security Settings dialog box for the object, which is accessed by using the Active Directory Users And Computers console. To remove special permissions from an object, you must be the owner of the object or have been granted permission to do so by the owner.
To remove special permissions, complete the following steps:
1.Click Start, point to Administrative Tools, and then click Active Directory Users And Computers. On the View menu, ensure that Advanced Features is selected.
Right-click the object for which you want to remove special permissions and click Properties.
2.In the Properties dialog box for the object, click the Security tab. Click Advanced.
3.In the Advanced Security Settings dialog box for the object, in the Permission
Entries box, select the permission you want to remove, and then click Remove.
Note If the Remove button is unavailable, clear the Allow Inheritable Permissions From The Parent To Propagate To This Object And All ...
... Child Objects. Include These With Entries Explicitly Defined Here check box, and then click Remove. However, keep in mind that if you do this, the object no longer inherits permissions from the parent object.
To locate users using the Find option
1.On Serverl, use the procedure provided earlier in this CompTIA A+ certification lesson to find users in the West OU with the first name of User. What is the result?
In the Find Users, Contacts, And Groups dialog box, Windows Server 2003 displays the User Eleven, User Thirteen, User Fifteen, User Seventeen, and User Nineteen accounts. Results might vary on your system if additional users have been created.
2.On Serverl, use the procedure provided earlier in this lesson to find users in the contoso.com domain with the first name of User. What is the result?
In the Find Users, Contacts, And Groups dialog box, Windows Server 2003 displays the User Eleven, User Thirteen, User Fifteen, User Seventeen, and User Nineteen accounts, plus the User One, User Three, User Five, User Seven, and User Nine accounts you added in Chapter 7. Results might vary on your system if additional users have been created.
3.Use the procedure provided earlier in this lesson to find users in the contoso.com domain with the telephone number beginning with 555. What is the result?
In the Find Users, Contacts, And Groups dialog box, Windows Server 2003 displays the User Eleven account for which you typed a telephone number of 555-1234. Results might vary on your system if additional free practice exam questions users have been created.