Apply These Permissions To Objects And/or Containers Within This Container

By Author: Alyssa
Total Articles: 128
Comment this article

Location: Permission Entry dialog box for an object.
Q Function: Prevents child objects outside of the container from inheriting permissions. This option is not available if the Apply Onto list box is set to "This Object Only."
Q Default setting: The check box is cleared, allowing permissions inheritance to flow past the immediate children to other containers within the parent.
Q Action to take: If you want only the immediate child objects of the container to inherit this permission, check this box.

Exam Tip for 70-297 Exam(http://www.mcse-70-297.com)
Make sure you understand how each setting described here affects inheritance.
Note The settings for the Apply Onto list and the Apply These Permissions To Objects And/ Or Containers Within This Container Only check box in the Permission Entry dialog box for an object are the same in both the Object and Properties tabs, regardless of the tab in which they are set. Therefore, you don't need to make changes to both tabs.

When a user authenticates across a trust with selective authentication enabled, an Other Organization security ...
... ID (SID) is added to the user's authorization data. The presence of this SID prompts a check on the resource domain to ensure that the user is allowed to authenticate to the particular service. Once the user is authenticated, if the Other Organization SID is not already present, then the server adds the This Organization SID. Only one of these special SIDs can be present in an authenticated user's context.
Administrators in each domain or forest can add objects from one domain to ACLs on shared free Microsoft questions(http://www.examshots.com/vendor/Microsoft-1.html) resources in the other domain or forest. You can use the ACL editor to add or remove objects residing in one domain or forest to ACLs on resources in the other domain.
Setting Selective Authentication

Recall from Chapter 4 that you can set selective authentication when you create an external or forest trust by using the New Trust Wizard. You can also set selective authentication for an existing external or forest trust by using the Active Directory Domains And Trusts console.
To set selective authentication for an external or forest trust, complete the follow¬ing steps:
1. Click Start, point to Administrative Tools, and then click Active Directory Domains And Trusts.
2. In the console tree, right-click the domain node for the domain you want to administer, and then click Properties.
3. On the Trusts tab, under either Domains Trusted By This Domain

When a user authenticates across a trust with selective authentication enabled, an Other Organization security ID (SID) is added to the user's authorization data. The presence of this SID prompts a check on the resource domain to ensure that the user is allowed to authenticate to the particular service. Once the IT certification(http://www.buyitexam.com) is authenticated, if the Other Organization SID is not already present, then the server adds the This Organization SID. Only one of these special SIDs can be present in an authenticated user's context.

Administrators in each domain or forest can add objects from one domain to ACLs on shared resources in the other domain or forest. You can use the ACL editor to add or remove objects residing in one domain or forest to ACLs on resources in the other domain.