Understanding the ins and outs of AD and object permissions is no simple task, but your efforts can help avoid catastrophe. "I need more circuits in this room," I told him. "Oh, computers don't draw ...

To provide a consistent manner to identify the functional area responsible for a given object in the Active Directory, and to prevent collisions between objects in different organizational units (OUs) ...

Occasionally, I have active directory objects (users, groups) that get moved or deleted. Then management plays a finger-pointing game. We've got it rather restricted who in the admin staff can ...

Some time ago I delegated rights to the desktop guys to create/delete computer objects on a 2003 domain. That domain has been upgraded to 2008. One of the guys began complaining that he cannot delete ...

First, there's the security principal: Any object within the AD that can be assigned privileges and access control rights or permissions (Access control rights or permissions control access to ...