Permissions for Other Objects

The permission descriptions in the previous section described permissions relative to files and folders. There is a different set of permissions for Registry keys, printers, and Active Directory objects. To view or set permissions for an object, in Windows Explorer, right-click the object and choose Properties. In the Properties dialog box, the security tab lists the standard permissions.

To see the power and control that NTFS provides for access control, it is best to investigate the permissions of an OU (Organizational Unit) within Active Directory. The figure below shows permissions for a typical OU.

Object Properties dialog box showing Security tab

There may be over 10,000 individual advanced permissions that you can set for an OU. You can see a partial listing below.

Partial listing of advanced permissions