Enterprise Onboarding: Managing User Objects in Active Directory

Task Definition

Onboard a wave of regional data analytical contractors. The requirements mandate structural segregation—they must match standard data integrity baselines without having visibility into permanent internal network volumes.

Active Directory Setup Execution

1. Created a dedicated Organizational Unit (OU) labeled Contractors_Regional.
2. Provisioned account entities utilizing specific UPN standards (user@domain.com).
3. Assigned accounts into a security group mapped explicitly to a department path.

Restricting access via NTFS Permissions

Configured explicit inheritance settings on target shared project root directories:

Group Name	Inheritance	Permissions Granted
Domain Admins	Enabled	Full Control
Contractors_Group	Disabled	Read & Execute, List Folder Contents
Everyone	Disabled	No Access (Explicit Block)