Microsoft KB Archive/218596

= HOW TO: Assign Access Control Permissions on the Properties of an Active Directory Object =

Article ID: 218596

Article Last Modified on 10/30/2006

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Datacenter Server

-



This article was previously published under Q218596





IN THIS TASK
SUMMARY
 * An Example of How to Set Access Control Permissions on a Property of an Active Directory Object



SUMMARY
In Microsoft Windows 2000, administrators can apply access control permissions to Active Directory objects. Administrators can also apply access control permissions to properties of a specific Active Directory object. This functionality provides the administrator detailed control over what users can do in their environment.

back to the top

An Example of How to Set Access Control Permissions on a Property of an Active Directory Object

 * 1) Log on to a domain controller with an account that is in the Domain Administrators group.
 * 2) Run the "Active Directory Users and Computers" Microsoft Management Console (MMC) snap-in.
 * 3) On the View menu, click Advanced Features.
 * 4) In the Active Directory tree, click a specific object for which you want to modify the access control permissions that apply to a specific property. In this example, click a specific user object.
 * 5) Right-click on the user, and then click Properties.
 * 6) In the Properties dialog box, click the Security tab.
 * 7) On the Security tab, click Advanced. This opens the Access Control Settings for   dialog box.
 * 8) In this dialog box, you see all of the permission entries that exist for this object. If you see a permission entry for which you want to add a property Access Control Entry (ACE), click Edit for the specific permission entry. Otherwise, click Add to add a new permissions entry to the Access Control List (ACL).
 * 9) Clicking Edit or Add opens the Permission Entry for   dialog box. There are two tabs, Object and Properties. Click the Properties tab to see the properties for the object on which you can set access control permissions.
 * 10) On this tab you can set either Allow or Deny access control entries to be applied to the specific user. You can set detailed levels of permissions, such as setting permissions on items such as Read ZIP/Postal Code and Write Phone and Mail Options.

back to the top

Keywords: kbenv kbhowtomaster KB218596

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.