{"id":1013,"date":"2012-05-22T12:05:00","date_gmt":"2012-05-22T12:05:00","guid":{"rendered":"https:\/\/blogs.technet.microsoft.com\/windowsserver\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/"},"modified":"2024-03-08T10:23:02","modified_gmt":"2024-03-08T18:23:02","slug":"introduction-to-windows-server-2012-dynamic-access-control","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/","title":{"rendered":"Introduction to Windows Server 2012 Dynamic Access Control"},"content":{"rendered":"<p><em>We constantly strive to reduce the steps required for you to get your job done.\u00a0 One of the reasons Windows Server 2012 is a such great release is that we spent so much time listening to our customers and understanding their scenarios and concerns.\u00a0 When development teams start from a technology\/feature mindset, it can be hard to work across groups because helping another team usually means that you have to give up something you wanted to do.\u00a0 We were able to achieve a very high level of technology integration and cross-group cooperation because we all shared a common understanding of our customers and their scenarios.\u00a0 Teams were eager to help each other succeed in delivering those scenarios.\u00a0 When you have lots of teams working together towards a common goal, you can really change the game and tackle some really hard problems.\u00a0 Today\u2019s blog is a good illustration of that.<\/em><\/p>\n<p><em>Anyone that has been involved in securing data or accessing data security knows that the traditional security models and mechanisms are not always flexible enough to address today\u2019s concerns and scenarios.\u00a0 Whether it&#8217;s compliance requirements, increased business impact of disclosed data, or management of the sheer scale of data \u2013 it is clear that the capabilities provided by the current access control mechanism can be improved so that it is easier for administrators and users to address these challenges.\u00a0 A number of teams worked together to deliver Windows Server 2012\u2019s Dynamic Access Control.\u00a0 I think you\u2019ll find that it, like so many other things in Windows Server 2012, is just what you were asking for.<\/em><\/p>\n<p><em>If you haven\u2019t downloaded the beta yet, take some time to read this blog and watch some of the videos it points to and then schedule some time on your calendar to download the beta and try it out.<\/em><\/p>\n<p>I\u2019m very excited to introduce to you the new Dynamic Access Control feature set.<\/p>\n<p>I\u2019ll start with a brief introduction and insight into the planning process, discuss the new Central Access Policy model and describe the end-to-end File Server solution that we built into Windows Server 2012. I will also touch on how we enable an incremental deployment model so that you do not need to move your entire environment to Windows Server 2012 in order to use the feature set. I will touch on work with partners in this area, too.<\/p>\n<p>You can find a Dynamic Access Control overview demo <a title=\" here\" href=\"http:\/\/technet.microsoft.com\/en-us\/edge\/dynamic-access-control-demo-walkthrough.aspx\" target=\"_blank\" rel=\"noopener\">here<\/a>.<\/p>\n<p><span style=\"text-decoration: underline\">Introduction<\/span><\/p>\n<p>In today\u2019s complex IT environments data is being created on distributed systems at a staggering rate and accessed through a plethora of devices. Compliance with regulatory standards and the need to secure leakage of business critical and personal data present major challenges for businesses and corporate IT. The key pillars for data compliance and leakage prevention are controlling who has access to information and having the ability to report who actually accessed specific information.<\/p>\n<p>Not surprisingly, this was the exact situation that we observed when we started planning for Windows Server 2012 a few years ago. A few of the points that we repeatedly heard from customers during the planning period included:<\/p>\n<ul>\n<li>Centrally manage access to information based on business and compliance needs<\/li>\n<li>Access to information needs to be audited for compliance and analysis purpose<\/li>\n<li>Sensitive information should be protected wherever it goes<\/li>\n<li>Content owners should be responsible for their information &#8211; IT admins are not librarians<\/li>\n<li>Maintaining information worker productivity is key<\/li>\n<\/ul>\n<p>We then looked at the different personas within an organization and how they participate in meeting the regulatory and business requirements for data compliance, in order to provide the right set of technologies and solutions that help address the data compliance challenge.<\/p>\n<p>The range of personas involved starts with the CSO\/CIO office that identifies the business and regulatory compliance needs. It continues with the IT administrators that manage the systems and the business owners that control the actual information. Last, the organization would like to keep the impact on the information worker to a minimum (ideally with no impact at all).<\/p>\n<p><a href=\"https:\/\/cloudblogs.microsoft.com\/wp-content\/uploads\/2018\/03\/2438.Figure201.jpg\"><img decoding=\"async\" src=\"https:\/\/cloudblogs.microsoft.com\/wp-content\/uploads\/2018\/03\/2438.Figure201.jpg\" alt=\" \" border=\"0\" \/><\/a><\/p>\n<p>To help organizations reach their data compliance, we eventually focused on the following areas:<\/p>\n<ul>\n<li>Identify the information that needs to be managed to meet business and compliance requirements<\/li>\n<li>Apply appropriate access policies\u00a0 to information<\/li>\n<li>Audit access to information<\/li>\n<li>Encrypt information<\/li>\n<\/ul>\n<p>These focus areas were then translated to a set of Windows capabilities that enable data compliance in partner and Windows-based solutions.<\/p>\n<ul>\n<li>Add the ability to configure Central Access and Audit Policies in Active Directory. These policies are based on conditional expressions that take into account the following so that organizations can translate business requirements to efficient policy enforcement and considerably reduce the number of security groups needed for access control:<\/li>\n<\/ul>\n<ul>\n<li><strong>Who<\/strong> the <strong>user<\/strong> is<\/li>\n<li><strong>What device<\/strong> they are using, and<\/li>\n<li><strong>What data<\/strong> is being accessed<\/li>\n<\/ul>\n<ul>\n<li>Integrate claims into Windows authentication (Kerberos) so that users and devices can be described not only by the security groups they belong to, but also by claims such as: \u201cUser is from the Finance department\u201d and \u201cUser\u2019s security clearance is High\u201d<\/li>\n<li>Enhance the File Classification Infrastructure to allow business owners and users to identify (tag) their data so that IT administrators are able to target policies based on this tagging. This ability works in parallel with the ability of the File Classification Infrastructure to automatically classify files based on content or any other characteristics<\/li>\n<li>Integrate Rights Management Services to automatically protect (encrypt) sensitive information on servers so that even when the information leaves the server, it is still protected.<\/li>\n<\/ul>\n<p><span style=\"text-decoration: underline\">Central Access Policies<\/span><\/p>\n<p>One can look at Central Access Policies as a safety net that an organization applies across its servers. These safety net policies enhance (but do not replace) the local access policy (e.g. Discretionary ACL) that is applied to the information. For example, if a local DACL on a file allows access to a specific user but a Central Policy restricts access to the same user, the user will not be able to get access to the file (and vice versa.)<\/p>\n<p>The initiative to deploy and enforce a Central Access Policy may come for different reasons and from multiple levels of the organization:<\/p>\n<ul>\n<li><strong>Compliance policy:<\/strong> This policy relates to compliance and business requirements and is targeted at protecting the right access to information that is being managed. For example: Allow only a specific group of people access to information that falls under the \u201cUS-EU Safe Harbor\u201d regulation.<\/li>\n<li><strong>Departmental authorization policy:<\/strong> Each department in an organization has some special data handling requirements that they would like to enforce. This is very common in distributed organization. For example: The finance department\u00a0 wants to limit all access to finance information only to the finance employees.<\/li>\n<li><strong>Need to know policy:<\/strong> This is a policy that ensures that access is allowed on a need-to-know basis. Examples include:<\/li>\n<\/ul>\n<ul>\n<li>Vendors should be able to access and edit only files that pertain to the project that they are working on.<\/li>\n<li>In financial institutions, information walls are important so that analysts do not access brokerage information and brokers do not access analysis information.<\/li>\n<\/ul>\n<p><span style=\"text-decoration: underline\">Central Audit Policies<\/span><\/p>\n<p>Central Audit Policy is a powerful tool to help maintain the security of an enterprise. One of the key goals of security audits is regulatory compliance. Industry standards such as SOX, HIPPA, PCI, etc. require organizations to follow a strict set of rules related to information security and privacy.\u00a0 Security audits help establish the presence (or absence) of such policies and thereby prove compliance (or non-compliance) with these standards. Additionally, security audits help detect anomalous behavior, identify and mitigate gaps in security policy and deter irresponsible behavior by creating a trail of user activity that you can use for forensic analysis.<\/p>\n<p>Windows Server 2012 enables administrators to author audit policies using expressions that take into account what information users are accessing and who the user is so that an organization can target audit to specific information wherever it resides. This opens the doors to richer, more targeted and easy-to-manage audit policies. It enables scenarios that until now were either impossible or too difficult to enable. For example you can now easily author audit policies such as the ones listed below:<\/p>\n<ul>\n<li>Audit everyone who does not have a high security clearance and yet tries to access \u201chigh impact\u201d information.<\/li>\n<li>Audit all vendors when they try to access documents related to projects that they are not working on.<\/li>\n<\/ul>\n<p>This helps regulate the volume of audit events and limit them to only the most relevant information\/users so that you can monitor access to information across multiple servers without generating an unmanageable volume of audit events.<\/p>\n<p>In addition, the information tagging is recorded in the audit events so that event collection mechanism can provide contextual reports such as: Who accessed all the \u201chigh impact\u201d information in the last three months.<\/p>\n<p><span style=\"text-decoration: underline\">The File Server solution<\/span><\/p>\n<p>Based on this infrastructure we built a full end-to-end Windows-based solution for Windows Server 2012 Active Directory, Windows Server 2012 File Server and Windows 8 client. This solution allows you to:<\/p>\n<ul>\n<li><strong>Identify data<\/strong> using automatic and manual classification of files.<\/li>\n<li><strong>Control access<\/strong> to files across file servers by applying safety net Central Access Policies. For example, you can control who can access health information within the organization.<\/li>\n<li><strong>Audit access<\/strong> to files on file servers by using Central Audit Policies for compliance reporting and forensic analysis. For example, you could identify who accessed highly sensitive information during the last three months.<\/li>\n<li><strong>Encrypt data<\/strong> by automatically applying Rights Management Services (RMS) encryption for sensitive Microsoft Office documents. For example: you could configure RMS to encrypt all documents that contain Health Insurance Portability and Accountability Act (HIPAA) information.<\/li>\n<\/ul>\n<p><a href=\"https:\/\/cloudblogs.microsoft.com\/wp-content\/uploads\/2018\/03\/3225.Figure202.jpg\"><img decoding=\"async\" src=\"https:\/\/cloudblogs.microsoft.com\/wp-content\/uploads\/2018\/03\/3225.Figure202.jpg\" alt=\" \" border=\"0\" \/><\/a><\/p>\n<p>In order to support deployment across multiple file servers in the organization, we are also providing the Data Classification Toolkit that enables configuration and reporting across multiple servers.<br \/>\nThe current Beta for the Data Classification Toolkit is available for download <a title=\"here\" href=\"https:\/\/connect.microsoft.com\/site715\" target=\"_blank\" rel=\"noopener\">here<\/a>.<\/p>\n<p><span style=\"text-decoration: underline\">The concept of incremental deployment<\/span><\/p>\n<p>One of the core design principles of Dynamic Access Control is incremental deployments. You can start using the feature set as soon as possible to solve targeted business problems for information access and audit.<\/p>\n<p>You can use most of the Dynamic Access Control capabilities with the Windows Server 2012 File Server and an upgraded Active Directory domain schema. Adding a minimal number of Windows Server 2012 domain controllers will enable user claims and so on. Each part of the system that you upgrade provides you with more capabilities but it is up to you to set the pace.<\/p>\n<p><a href=\"https:\/\/cloudblogs.microsoft.com\/wp-content\/uploads\/2018\/03\/8306.Figure203.jpg\"><img decoding=\"async\" src=\"https:\/\/cloudblogs.microsoft.com\/wp-content\/uploads\/2018\/03\/8306.Figure203.jpg\" alt=\" \" border=\"0\" \/><\/a><\/p>\n<p><span style=\"text-decoration: underline\">Partner solutions<\/span><\/p>\n<p>Partner solutions and line of business applications can further use the Windows infrastructure investments for Dynamic Access Control, providing great value for organizations that use Active Directory. A few examples of partner solutions that we have already demoed at the \/\/build\/ conference last year include:<\/p>\n<ul>\n<li>Data Leakage Prevention (DLP) integration for automatic content classification<\/li>\n<li>Central audit analysis<\/li>\n<li>Rights Management Services (RMS) authorization using Central Access Policies<\/li>\n<li>Many others\u2026<\/li>\n<\/ul>\n<p>We plan to show many additional partner integrated solutions in the upcoming TechEd US conference (Jun. 11-14, 2012) <em>Twitter hashtag #MSTechEd<\/em><\/p>\n<p><span style=\"text-decoration: underline\">A few additional resources that you might find useful:<\/span><\/p>\n<p>TechNet manual (Beta): <a href=\"http:\/\/technet.microsoft.com\/en-us\/library\/hh831717.aspx\">http:\/\/technet.microsoft.com\/en-us\/library\/hh831717.aspx<\/a><\/p>\n<p>Data Classification Toolkit (Beta): <a href=\"https:\/\/connect.microsoft.com\/site715\">https:\/\/connect.microsoft.com\/site715<\/a><\/p>\n<p>Hands on lab: <a href=\"http:\/\/technet.microsoft.com\/en-us\/windowsserver\/hh968267.aspx\">http:\/\/technet.microsoft.com\/en-us\/windowsserver\/hh968267.aspx<\/a> (Using Dynamic Access Control to automatically and centrally secure data)<\/p>\n<p>Dynamic Access Control at MMS 2012: <a href=\"https:\/\/channel9.msdn.com\/posts\/Dynamic-Access-Control-Demo-and-Interview\">https:\/\/channel9.msdn.com\/posts\/Dynamic-Access-Control-Demo-and-Interview<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>We constantly strive to reduce the steps required for you to get your job done.\u00a0 One of the reasons Windows Server 2012 is a such great release is that we spent so much time listening to our customers and understanding their scenarios and concerns.<\/p>\n","protected":false},"author":742,"featured_media":20672,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"msxcm_post_with_no_image":false,"ep_exclude_from_search":false,"_classifai_error":"","_classifai_text_to_speech_error":"","footnotes":""},"post_tag":[23,386],"product":[],"content-type":[964],"solution":[952],"coauthors":[],"class_list":["post-1013","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","tag-windows-server","tag-windows-server-2012","content-type-updates","solution-server-management","review-flag-1593580427-982","review-flag-8-1593580467-311","review-flag-alway-1593580309-789","review-flag-integ-1593580287-252","review-flag-new-1593580246-692","review-flag-partn-1593580283-870"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Introduction to Windows Server 2012 Dynamic Access Control | Microsoft Windows Server Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Introduction to Windows Server 2012 Dynamic Access Control | Microsoft Windows Server Blog\" \/>\n<meta property=\"og:description\" content=\"We constantly strive to reduce the steps required for you to get your job done.\u00a0 One of the reasons Windows Server 2012 is a such great release is that we spent so much time listening to our customers and understanding their scenarios and concerns.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Windows Server Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/WindowsServer\" \/>\n<meta property=\"article:published_time\" content=\"2012-05-22T12:05:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-03-08T18:23:02+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-content\/uploads\/2024\/03\/Two-people-on-a-tablet-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1170\" \/>\n\t<meta property=\"og:image:height\" content=\"640\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Jeffrey Snover\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@WindowsServer\" \/>\n<meta name=\"twitter:site\" content=\"@WindowsServer\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jeffrey Snover\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 min read\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/\"},\"author\":[{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/author\/jeffrey-snover-windows-server\/\",\"@type\":\"Person\",\"@name\":\"Jeffrey Snover\"}],\"headline\":\"Introduction to Windows Server 2012 Dynamic Access Control\",\"datePublished\":\"2012-05-22T12:05:00+00:00\",\"dateModified\":\"2024-03-08T18:23:02+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/\"},\"wordCount\":1901,\"commentCount\":6,\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-content\/uploads\/2024\/03\/Two-people-on-a-tablet-2.webp\",\"keywords\":[\"Windows Server\",\"Windows Server 2012\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/\",\"name\":\"Introduction to Windows Server 2012 Dynamic Access Control | Microsoft Windows Server Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-content\/uploads\/2024\/03\/Two-people-on-a-tablet-2.webp\",\"datePublished\":\"2012-05-22T12:05:00+00:00\",\"dateModified\":\"2024-03-08T18:23:02+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/#primaryimage\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-content\/uploads\/2024\/03\/Two-people-on-a-tablet-2.webp\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-content\/uploads\/2024\/03\/Two-people-on-a-tablet-2.webp\",\"width\":1170,\"height\":640,\"caption\":\"a man and a woman looking at a laptop\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Introduction to Windows Server 2012 Dynamic Access Control\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/#website\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/\",\"name\":\"Microsoft Windows Server Blog\",\"description\":\"Your Guide to the Latest Windows Server Product Information\",\"publisher\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/#organization\",\"name\":\"Microsoft Windows Server Blog\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-content\/uploads\/2019\/08\/Microsoft-Logo.png\",\"contentUrl\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-content\/uploads\/2019\/08\/Microsoft-Logo.png\",\"width\":1,\"height\":1,\"caption\":\"Microsoft Windows Server Blog\"},\"image\":{\"@id\":\"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/WindowsServer\",\"https:\/\/x.com\/WindowsServer\",\"https:\/\/www.linkedin.com\/showcase\/microsoft-cloud-platform\/\",\"https:\/\/www.youtube.com\/user\/MSCloudOS\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Introduction to Windows Server 2012 Dynamic Access Control | Microsoft Windows Server Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/","og_locale":"en_US","og_type":"article","og_title":"Introduction to Windows Server 2012 Dynamic Access Control | Microsoft Windows Server Blog","og_description":"We constantly strive to reduce the steps required for you to get your job done.\u00a0 One of the reasons Windows Server 2012 is a such great release is that we spent so much time listening to our customers and understanding their scenarios and concerns.","og_url":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/","og_site_name":"Microsoft Windows Server Blog","article_publisher":"https:\/\/www.facebook.com\/WindowsServer","article_published_time":"2012-05-22T12:05:00+00:00","article_modified_time":"2024-03-08T18:23:02+00:00","og_image":[{"width":1170,"height":640,"url":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-content\/uploads\/2024\/03\/Two-people-on-a-tablet-2.png","type":"image\/png"}],"author":"Jeffrey Snover","twitter_card":"summary_large_image","twitter_creator":"@WindowsServer","twitter_site":"@WindowsServer","twitter_misc":{"Written by":"Jeffrey Snover","Est. reading time":"8 min read"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/#article","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/"},"author":[{"@id":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/author\/jeffrey-snover-windows-server\/","@type":"Person","@name":"Jeffrey Snover"}],"headline":"Introduction to Windows Server 2012 Dynamic Access Control","datePublished":"2012-05-22T12:05:00+00:00","dateModified":"2024-03-08T18:23:02+00:00","mainEntityOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/"},"wordCount":1901,"commentCount":6,"publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/#organization"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-content\/uploads\/2024\/03\/Two-people-on-a-tablet-2.webp","keywords":["Windows Server","Windows Server 2012"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/","url":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/","name":"Introduction to Windows Server 2012 Dynamic Access Control | Microsoft Windows Server Blog","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/#primaryimage"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-content\/uploads\/2024\/03\/Two-people-on-a-tablet-2.webp","datePublished":"2012-05-22T12:05:00+00:00","dateModified":"2024-03-08T18:23:02+00:00","breadcrumb":{"@id":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/#primaryimage","url":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-content\/uploads\/2024\/03\/Two-people-on-a-tablet-2.webp","contentUrl":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-content\/uploads\/2024\/03\/Two-people-on-a-tablet-2.webp","width":1170,"height":640,"caption":"a man and a woman looking at a laptop"},{"@type":"BreadcrumbList","@id":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/2012\/05\/22\/introduction-to-windows-server-2012-dynamic-access-control\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/"},{"@type":"ListItem","position":2,"name":"Introduction to Windows Server 2012 Dynamic Access Control"}]},{"@type":"WebSite","@id":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/#website","url":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/","name":"Microsoft Windows Server Blog","description":"Your Guide to the Latest Windows Server Product Information","publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/#organization","name":"Microsoft Windows Server Blog","url":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-content\/uploads\/2019\/08\/Microsoft-Logo.png","contentUrl":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-content\/uploads\/2019\/08\/Microsoft-Logo.png","width":1,"height":1,"caption":"Microsoft Windows Server Blog"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/WindowsServer","https:\/\/x.com\/WindowsServer","https:\/\/www.linkedin.com\/showcase\/microsoft-cloud-platform\/","https:\/\/www.youtube.com\/user\/MSCloudOS"]}]}},"word_count":1893,"msxcm_display_generated_audio":false,"msxcm_animated_featured_image":null,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Microsoft Windows Server Blog","distributor_original_site_url":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog","push-errors":false,"_links":{"self":[{"href":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-json\/wp\/v2\/posts\/1013","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-json\/wp\/v2\/users\/742"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-json\/wp\/v2\/comments?post=1013"}],"version-history":[{"count":0,"href":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-json\/wp\/v2\/posts\/1013\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-json\/wp\/v2\/media\/20672"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-json\/wp\/v2\/media?parent=1013"}],"wp:term":[{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-json\/wp\/v2\/post_tag?post=1013"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-json\/wp\/v2\/product?post=1013"},{"taxonomy":"content-type","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-json\/wp\/v2\/content-type?post=1013"},{"taxonomy":"solution","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-json\/wp\/v2\/solution?post=1013"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/windows-server\/blog\/wp-json\/wp\/v2\/coauthors?post=1013"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}