Configuring Dynamic Access Control in a Lab
Dynamic access control can be used to simplify security permission management. I mainly use role based access control to control file share access and auditing. However, that could lead to a lot of management overhead and thousands of groups in complex file share structures. Dynamic Access Control has a bit of a learning curve, but once you understand the basic concepts it can be fairly easy to configure and deploy. I have only tested and configured the following in a lab environment. This purpose of this article to get a better understanding of dynamic access control concepts. I will start out with some basic conditional expressions and work up to central access policies. Our environment will look similar to the diagram below. Users' access to files will be based on their attributes and the properties of the files. Pre-requisites File server that is Server 2012+ 2012+ schema The File Server Resource Manager role must be installed on your file server ...