Summary

Dynamic Access Control can take some getting used to when you first deploy it. There are lots of little steps to wade through and lots of customization options. This is access control that extends way beyond pointing and clicking to set NTFS permissions.

Expect pitfalls, teeth gnashing, and some of Microsoft’s infamously cryptic error messages from time to time. Above all, do not attempt to deploy DAC in a live production environment. Test it out first and see if deploying DAC impacts existing permissions.

DAC is a major enhancement from previous versions of Windows Server. Its true power will be most obvious in Windows Server 2012–level domains running Server 2012 domain controllers and file servers and Windows 8 clients. However, you can get started with DAC by deploying a minimum infrastructure with a Windows Server 2012 domain controller and file server.