JSI Tip 4953. How do I apply access control permissions to Active Directory objects?

To set access control permissions on an Active Directory object:

1. Log on to a domain controller with an account that is in the Domain Administrators group.
 
2. Run the "Active Directory Users and Computers" Microsoft Management Console (MMC) snap-in.
 
3. On the View menu, click Advanced Features .
 
4. Select a specific object in the Active Directory tree
 
5. Right-click the object, and then press Properties .
 
6. Select the Security tab.
 
7. Press Advanced . This opens the Access Control Settings for <the object> .
 
8. In the dialog, you see all of the permissions for this object. Press Edit after selecting an existing entry or press Add to add a new permissions entry.
 
9. Pressing Edit or Add opens the Permission Entry for <the object> dialog. Press the Properties tab to see the properties for the object.
 
10. Set either Allow or Deny access control entries to be applied to the specific object. You can set detailed levels of permissions, such as setting permissions on items such as Read ZIP/Postal Code and Write Phone and Mail Options .