Editing Access-control list (section)

=== Active Directory ACLs ===

[[Microsoft]]'s [[Active Directory]] service implements an [[LDAP]] server that stores and disseminates configuration information about users and computers in a domain.<ref>{{cite web |title=[MS-ADTS]: Active Directory Technical Specification |date=7 June 2024 |url=https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/d2435927-0999-4c62-8c6d-13ba31a52e1a}}</ref> Active Directory extends the LDAP specification by adding the same type of access-control list mechanism as Windows&nbsp;NT uses for the NTFS filesystem. Windows&nbsp;2000 then extended the syntax for access-control entries such that they could not only grant or deny access to entire LDAP objects, but also to individual attributes within these objects.<ref>{{cite journal |last=Swift |first=Michael M. |title=Improving the granularity of access control for [[Windows 2000]] |journal=ACM Transactions on Information and System Security |volume=5 |issue=4| pages=398–437 |date=November 2002 |doi=10.1145/581271.581273 |s2cid=10702162}}</ref>