Chapter 8. Managing Access to Objects in Organizational Units

Objectives

This chapter doesn't cover any specific objectives on the Microsoft Managing and Maintaining a Microsoft Windows Server 2003 Environment exam. However, it does cover information that you will most likely see on the testand on the job.

Outline

Introduction		350
Organizational Unit Overview		350
Modifying Permissions for Objects in an OU		351
	Security Descriptors	351
	Permissions	352
	Assigning Permissions to Active Directory Objects	353
	Permissions Inheritance	358
	Moving AD Objects	359
	Effective Permissions	360
Delegating Control of an OU		363
Chapter Summary		368
	Key Terms	368
Apply Your Knowledge		368

Study Strategies

• In studying this section, be sure to practice all the activities described. Become very familiar with the Delegation of Control Wizard, what standard tasks can be delegated, and how to create a custom task.

• The exercises in this chapter are built on the users, groups, and OUs that you created in the exercises in Chapter 3, "Managing Groups," and Chapter 4, "Managing and Maintaining Access to Resources." If you have not yet completed those exercises, now would be a good time to do it!

• Pay particular attention to managing access to OUs through the use of permissions.

• Know the differences between standard and special permissions, and when each should be used.