Protecting data and maintaining sensitive data inside the organization is a challenge for any enterprise. Information or data leakage can adversely affect an organization in many ways. Minimizing or controlling access is key in maintaining the integrity and confidentiality of these types of data. In this chapter, you will learn about a new and secure access control mechanism for data and file servers. In a traditional method, there is no easy way to implement an access control mechanism based on the type or class of data. Also, the permissions are based on a static value of the control mechanism.

In Windows Server 2012, Microsoft introduced a new concept called Dynamic Access Control. As it sounds, this method can be used to implement a dynamic access mechanism on an Active Directory resource. This access mechanism can be implemented based on the types and properties of the resources.

The implementation and configuration details of DAC are included in the following...