1. In a computing environment, a method comprising: receiving a request to manage security settings of a group policy data construct; generating a permissions table based on security information associated with the group policy data construct, wherein each row in the permissions table corresponds to a trustee that is at least one computer or at least one user, and each column in the permissions table corresponds to a directory service permission, wherein a plurality of cells in the permissions table contain data regarding an access state to a directory service, whether the access state is inherited, and whether the access state is inheritable, the access state in one of the plurality of cells of the permissions table being denied and the access state in another of the plurality of the cells of the permissions table being allowed; changing the permissions table to satisfy the request; saving security settings to the group policy data construct based on the changed permissions table; and performing a check of the permissions table to determine whether each access state is either in a state of allowed or in a state of denied.