How to Assign Access Control Permissions on the Properties of an Active Directory Object

• Microsoft Windows 2000 Server
• Microsoft Windows 2000 Datacenter Server
• Microsoft Windows 2000 Advanced Server

SUMMARY

In Microsoft Windows 2000, administrators can apply access control permissions to Active Directory objects. Administrators can also apply access control permissions to properties of a specific Active Directory object. This functionality provides the administrator detailed control over what users can do in their environment.

MORE INFORMATION

The following steps provide an example of how to set access control permissions on a property of an Active Directory object.

1. Log on to a domain controller with an account that is in the Domain Administrators group.



2. Run the "Active Directory Users and Computers" Microsoft Management Console (MMC) snap-in.



3. On the View menu, click Advanced Features.



4. In the Active Directory tree, click a specific object for which you want to modify the access control permissions that apply to a specific property. In this example, click a specific user object.



5. Right-click on the user, and then click Properties.



6. In the Properties dialog box, click the Security tab.



7. On the Security tab, click Advanced. This opens the Access Control Settings for Username dialog box.



8. In this dialog box, you see all of the permission entries that exist for this object. If you see a permission entry for which you want to add a property Access Control Entry (ACE), click Edit for the specific permission entry. Otherwise, click Add to add a new permissions entry to the Access Control List (ACL).



9. Clicking Edit or Add opens the Permission Entry for Username dialog box. There are two tabs, Object and Properties. Click the Properties tab to see the properties for the object on which you can set access control permissions.



10. On this tab you can set either Allow or Deny access control entries to be applied to the specific user. You can set detailed levels of permissions, such as setting permissions on items such as Read ZIP/Postal Code and Write Phone and Mail Options.

Additional query words:

Keywords : kbenv kbtool
Version : WINDOWS:2000
Platform : WINDOWS
Issue type : kbhowto