Policy Models (2)
	• Win200X – Users and groups – Groups may be members of groups – Rights are the combined rights of all groups of which the user is a direct or indirect member – Administrator controls everything • can grant any right – The default is strong control over admin functions and little control over files