Practice: Controlling Access to Active Directory Objects

In this practice, you assign standard and special permissions for an mcitp 2008 object, set inheritance for the permissions, and remove security principals and their permissions from an object.
Exercise 1: Assigning Standard and Special Permissions
In this exercise, you assign a standard permission and a special permission to the Sales group for the East OU.
To assign standard and special permissions
1.Log on to Serverl as Administrator.
2.On Serverl, use the procedure provided earlier in this lesson to assign the Full Control standard permission to the Sales group for the East OU.
3- Use the procedure provided earlier in this lesson to edit the special permissions already assigned to the Sales group for the East OU. Change the special permissions to not allow the Modify Owner permission.
4.Access the Security tab in the Properties dialog box for the Fast OU. The Sales group should be listed in the Group Or User Names box.
5.Access the Security tab in the Properties dialog box for the Chicago OU. Is the Sales group listed in the Group Or User Names box? Why or why not?
No, the Sales group is not listed for the windows 7 enterprise desktop support technician Chicago OU because inheritance has not been set.
6.Access the Security tab in the Properties dialog box for User One in the Chicago OU. Is the Sales group listed in the Group Or User Names box? Why or why not?No, the Sales group is not listed for User One in the Chicago OU because inheritance has not been set.
Two employees have been hired to back up data, maintain the Windows Server 2003 domain controllers, and manage printers for the Main_Site. Which Builtin
groups will give these users the permissions they require to manage the domain controllers? How should you set up their accounts and group memberships?
These users will need permissions assigned to the Backup Operators, Account Operators, and Server Operators. You should create a global group specifically for these users. For example, create the Maintenance_Main global group. Make that group a member of the Backup Operators, Account Operators, and Server Operator domain local groups. Then place the user accounts for these new employees in that new global group.
Two security specialists have been contracted to create group policy for the humongous.com domain. They have no need to perform most administrative
tasks. How should you assign their group memberships? Make them a member of the Free Network+ study guides Group Policy Creator Owners domain group.