The following excerpt is from Chapter 6 of the MCSE Exam Cram 2 book "Designing security for a Microsoft Windows...
Server 2003 network" written by Ed Tittel, courtesy of Sams Publishing. Click to purchase, check out the complete book excerpt series or go straight to the practice exam if you think you're ready to be tested.
Designing a permission structure for directory service objects
Windows Server 2003 servers are flexible in regard to the assignment of permissions for Active Directory objects. As I said before, every object is controllable as to what it can do to other objects and what other objects can do to it. Microsoft recommends best practices when assigning permissions to Active Directory objects. These best practices focus on the strengths of the system and are designed to provide the greatest security with the least effort. You need to be familiar with the following best practices for directory service access permissions:
Click for the next excerpt in this series: Designing an access control strategy for files and folders
Click for the book excerpt series or purchase the book here.