Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2


Each type of object is controlled by an object manager. There is a different object manager for each type of object. The object types, their object managers, and the tools you use to manage these objects are as follows:

Object Type Permission Descriptions Procedures

Files and folders

Permissions for files and folders

Set, view, change, or remove permissions on files and folders


Set, view, change, or remove special permissions


Share permissions

Set permissions on a shared resource

Registry keys

Maintain Registry Security

Add users or groups to the Permissions list


Services permissions

Local computer security for file system, registry, system services


Assigning printer permissions

Set or remove permissions for a printer

Terminal Services Connections

Managing Permissions on ConnectionsorControlling connection access

Manage Connection Permissions

WMI object

Authorize WMI users and set permissions

Modify permissions or delete authorized users

Active Directory objects

Active Directory object permissions.

Best practices for assigning permissions on Active Directory objects.