TopicActive Directory →
Simple definition
A method of organizing groups and permissions in Active Directory.
Technical definition
AFDLP meansAx → Globalgroups → Domain Localgroups → Permissions and structure of rights assignments in a legible manner.
What’s the point? ?
Simplify management of access to shared and resource resources.
Concrete example
Users are placed in a global business group, which is itself a member of a local domain group with NTFS rights.
Common problems
- Rights given directly to users
- Misappointed groups
- Uncontrolled interlocking
Related terms
To be noted: precise behaviors and commands may vary depending on the versions, products and architectures.