Article DirectoryJust another article directory

You set permissions to either Allow or Deny. Deny permissions take precedence over all other Security+ certification permissions. For example, if you deny permission to a user to gain access to an object, the user will not have that permission, even if you allow the permission for a group of which the user is a member. The object type determines which permissions you can select. For example, you can assign the Reset Password permission to a security principal for a user object but not for a printer object. For each object type, there is a group of standard permissions and a group of more detailed special permissions.
Standard permissions are the most frequently assigned. You can view the standard permissions in the Security tab in the Properties dialog box for an object, shown in Figure 9-6.
To view the standard permissions for an object, complete the following steps:
1. Click Start, point to Administrative Tools, and then click Active Directory Users And Computers. On the View menu, ensure that Advanced Features is selected. Right-click the object for which you want to view standard permissions and click Properties.
In the Properties dialog box for the object, click the Security+ benefits. Click the appropriate security principal in the Group Or User Names box to view the assigned standard permissions.
Important You must select Advanced Features on the View menu to be able to access the Security tab.
Table 9-3 lists the basic standard permissions that are available for most objects (some object types have additional standard permissions) and the type of access that each permission allows.
Standard permissions are composed of special permissions, which provide you with a finer degree of control for assigning access to objects. For example, the standard Write permission is composed of the Write All Properties and All Validated Writes special permissions. Special permissions are also referred to as advanced security settings. You can view the special permissions in the Permission Entry dialog box for an object, shown in Figure 9-7.
The saved queries feature enables administrators to create, edit, save, organize and e-mail saved queries in order to monitor or perform a specific task on direc?tory objects. Saved queries are stored in the Saved Queries container in the Active Directory Users And Computers console. Saved queries can be exported to an .xml file and imported free comptia security+ exam into other Active Directory Users And Computers consoles located on Windows Server 2003 domain controllers in the same domain.

Read more on Administering the Active Directory Objects…

Windows Server 2003 supports Security+ benefits optional smart card authentication. A smart card is a credit cardsized device that is used with a personal identification number (PIN) to enable certificate-based authentication and single sign-on to the enterprise. Smart cards securely store certificates, public and private keys, passwords, and other types of personal information. Smart cards provide a more secure means of user authentication than passwords. However, deploying and maintaining a smart card program requires additional overhead, including the configuration of the Microsoft Certificate Services, smart card reader devices, and the smart cards themselves. A smart card contains a chip that stores the user’s private key, logon information, and public key certificate. The user inserts the card into a smart card reader attached to the computer and types in a PIN when requested. Smart cards rely on the public key infrastructure (PKI) of Windows Server 2003.
A discussion of PKI is outside the scope of this training kit. Refer to the Microsoft Windows Server 2003 Resource Kit (located on the Microsoft Web site at for more information on this topic.

Read more on Using Smart Cards…