Network Computing is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them. Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

How To Configure Access Controls With Active Directory: Page 4 of 6

5 Edit permissions for Sales Policy Click the Add button, scroll down to select user, computer or group. Select the sales group and click OK. The permission entry for Sales Policy will show up. Select the Full Control check box and then "Apply these permissions to objects and containers within this container only." Check the box and click OK. The permission entries for the sales GPO are shown. Click OK on the Access Control Setting for Sales Policy and OK on the Sales Policy Properties, and finally, close the Sales Properties Dialog. To further edit the Sales GPO, we can either reselect the Sales OU properties and modify the GPO policy or use the GPO MMC snap-in.

6 Edit the domain policy Enable the audit policy to check all the logon events to ensure access control is applied properly. The Domain Security Policy can be edited through the MMC snap-in by selecting Start/Programs/ Administrative Tools/Domain Security Policy. We recommend editing the security settings to assign password maximum and minimum age. We set the password minimum length to eight characters. By setting the account lockout policy, the admin can lock out a malicious user who tries to guess the right credentials by attempting several logons. We restrict the user to a maximum of four unsuccessful logins. To change that, select the Account Lockout Policy and double-click on Account Lockout Threshold, and set account lockout after four invalid login attempts. We also set the lockout duration and reset after 30 minutes.