The Active Directory directory service provides administrators with a high
degree of control over who has access to information in Active Directory. By
managing the permissions on directory objects and properties, administrators
can precisely specify which accounts can gain access to Active Directory and
the level of access that these accounts have.