|
Windows 2000 will ship with a new and improved interface component that lets you edit the entire Security Descriptor, not just the DACLs. It includes support for deny-access entries at a granular level and for inheritable entries. The good news is that you can install it now on NT 4.0 with SP4. To install, simply find the MSSCE\I386 subdirectory on the SP4 CD and run the MSSCE.exe program. For more information on the new UI element, check out Keith Brown's Security Briefs column in the May 1999 issue of Microsoft Systems Journal.
|