|
|
This chapter describes the tools related to Active Directory security, and primarily, permissions on directory objects. These tools allow an administrator to perform the following tasks:
View and/or modify permissions (the ACL lists) on directory objects (ACLDiag, DsACLs) and verify delegation of administrative tasks
Verify inheritance of ACLs at different levels of the directory object hierarchy and replication of ACLs between domain controllers (SDCheck)
Verify Kerberos authentication (KerbTray, KList)
|
|