Shared resources like shared folders and shared printers can be published in the Active Directory. Objects can be created in the Active Directory to represent these shared resources. Users can then search the Active Directory for resources with specific properties; eg. find printers that can print color in our site.

By default, any authenticated user can browse these resources in My Network Places Directory. The visibility of the resource is controlled by the object DACL. The object visibility could be further restricted by changing the DACL. To view the DACL with the Active Directory Users and Computers console, you must use the View menu to enable the Advanced Features.

Having permissions to a resource object does not provide access to the resource. Each resource has its own DACL to control access.