Real-World Active Directory Delegation Examples
Three concrete AD delegation scenarios with the right ACL technique for each: targeted Deny ACEs to hide mobile and pager from a Hardware Support team, the schema confidential bit to restrict national-ID attributes to HR, and a volume-object ACL to make a published share invisible to everyone except Finance.