tailieunhanh - Course 2273: Managing and maintaining a Microsoft Windows Server 2003 environment - Module 5

Module 5: Managing access to objects in organizational units. This module explains the permissions available for managing access to Active Directory objects, how to move objects between organizational units in the same domain, and how to delegate control of an organizational unit. | Module 5: Managing Access to Objects in Organizational Units Overview Modifying Permissions for Active Directory Objects Delegating Control of Organizational Units Lesson: Modifying Permissions for Active Directory Objects What Are Active Directory Object Permissions? Characteristics of Active Directory Object Permissions Permissions Inheritance for Active Directory Object Permissions Effects of Moving Objects on Permissions Inheritance What Are Effective Permissions for Active Directory Objects? Practice: Modifying Permissions for Active Directory Objects What Are Active Directory Object Permissions? Permission Allows the user to: Full Control Change permissions, take ownership, and perform the tasks that are allowed by all other standard permissions Write Change object attributes Read View objects, object attributes, the object owner, and Active Directory permissions Create All Child Objects Add any type of object to an organizational unit Delete All Child Objects Remove any type of child object from an organizational unit Characteristics of Active Directory Object Permissions Active Directory object permissions can be: Allowed or denied Implicitly or explicitly denied Set as standard or special permissions Standard permissions are the most frequently assigned permissions Special permissions provide a finer degree of control for assigning access to objects Set at the object level or inherited from its parent object Permissions Inheritance for Active Directory Object Permissions Child containers inherit permissions set on a parent container Inheritable permissions propagate from parent to child when: A child object is created The permissions on the parent object are modified Inheritance can be blocked Parent Container Access Child Container Permission Inherited by Child Containers User 1 Read Group 1 Full Control Permissions User 1 Read Group 1 Full Control Permissions Effects of Moving Objects on Permissions Inheritance Explicit . | Module 5: Managing Access to Objects in Organizational Units Overview Modifying Permissions for Active Directory Objects Delegating Control of Organizational Units Lesson: Modifying Permissions for Active Directory Objects What Are Active Directory Object Permissions? Characteristics of Active Directory Object Permissions Permissions Inheritance for Active Directory Object Permissions Effects of Moving Objects on Permissions Inheritance What Are Effective Permissions for Active Directory Objects? Practice: Modifying Permissions for Active Directory Objects What Are Active Directory Object Permissions? Permission Allows the user to: Full Control Change permissions, take ownership, and perform the tasks that are allowed by all other standard permissions Write Change object attributes Read View objects, object attributes, the object owner, and Active Directory permissions Create All Child Objects Add any type of object to an organizational unit Delete All Child Objects .