基于活动目录的访问控制系统设计

The Design of Access Control System Based on Active Directory

针对大规模企业管理信息系统 ,活动目录通过“A -G -U -DL -P”的访问控制策略 ,可根据需求 ,灵活地委派权限 ,安全地验证身份 ,集中管理 ,方便系统的访问控制管理 .各个域之间通过互相传递信任 ,可实施不同的域级策略 ,允许对系统的共享资源及外部域用户进行管理控制 。

The strategy A-G-U-DL-P is developed by AD for MIS of enterprise on a large scale. According to business needs, permissions are assigned neatly, authorities are delegated safely, administration is centralized, access system is easy to control. Transitive trust exists between all domains, distinct domain\|level policies can be implemented, the system resources are shared, domain users are concentratedly controlled and the burden of complicated network management is relieved.