enabling windows active directory and user access controls