Access Rights for Active Directory Objects

All directory objects use the same set of predefined access rights that correspond to the common directory operations. These rights are described in the ADS_RIGHTS_ENUM enumeration type.

In addition, you can define private access rights (extended rights) for operations that go beyond those covered by the predefined rights. See Extended Rights.