1. In a computing environment, a method comprising: receiving a request to manage security settings of a group policy data construct; generating a permissions table based on security information associated with the group policy data construct, wherein each row in the permissions table corresponds to a trustee and each column in the permissions table corresponds to a directory service permission, wherein each cell in the permissions table contains data regarding an access state, whether the access state is inherited, and whether the access state is inheritable; changing the permissions table to satisfy the request; saving security settings to the group policy data construct based on the changed permissions table; and performing a check of the permissions table to determine whether each access state is either in a state of allowed or in a state of denied.