Enforcing the "Least Privilege" Principle through Active Directory, OUs, GPOs, and Group Policy Filtering

This document presents an approach to further enforce the “Least Privilege” principle by combining Active Directory, GPOs, and Group Policy filtering techniques. This principle states that users should be given the minimum amount of privileges to perform their job. A simple scenario follows to emphasize the concepts and processes required to properly accomplish this task. Basic understanding of Active Directory and GPOs is assumed.

Tags:

Read the complete paper at SANS