A new model called Active Directory Based Role Access Control（ADBRAC） is discussed in this paper. This model is based on the Active Directory(AD) technology of Windows 2003 server and traditional thinking of Role Based Access Control(RBAC). In the processing of authority management and the realizing of system security policies, the concepts of user group, view and action are imported through abstracting main body and object simultaneously. Through implementing fine-grained authority definition and functional authority management in the management information system, the complexity of the management is reduced and the traditional RBAC is extended effectively. This model has been applied to the results and projects information service system of resource and environmental remote sensing projects, and the result shows that the model is simple, practical, safe and stable. The model has fairly strong versatility and capacity for the performance of the real world.