Share via

Determine Where to Apply Permissions

  • Article

Applies To: Windows Server 2008

Determining where to apply permissions

When you set advanced permissions on files and folders, you can use the Permission Entry for <Object Name> dialog boxto set which descendant objects will inherit permissions.

To find this dialog box, click the Advanced button on the access control user interface. On the Permissions tab click Edit twice.

In the Permission Entry for <Object Name> dialog box, the Apply onto box on the Object tab lists the locations where you can apply permissions. How these permissions are applied depends on whether you select the Apply these permissions to objects and/or containers within this container only check box.

Important

For Active Directory objects, not only do the specified objects in the Apply onto box inherit the access control entries but ALL child objects receive a copy of that ACE. The child objects not specified in the Apply onto box do not utilize the ACE whose copy they receive, but if there are enough objects that get copies of this ACE, that increased amount of data can cause serious performance problems to your network.

By default, this check box is cleared. See the following tables for details about how the inherited permissions are applied:

  • When the Apply these permissions to objects and/or containers within this container only check box is cleared

  • When the Apply these permissions to objects and/or containers within this container only check box is selected

When the Apply these permissions to objects and/or containers within this container only check box is cleared

Apply onto Applies permissions to current folder Applies permissions to subfolders in current folder Applies permissions to files in current folder Applies permissions to all subsequent subfolders Applies permissions to files in all subsequent subfolders

This folder only

x

 

 

 

 

The folder, subfolders and files

x

x

x

x

x

This folder and subfolders

x

x

 

x

 

This folder and files

x

 

x

 

x

Subfolders and files only

 

x

x

x

x

Subfolders only

 

x

 

x

 

Files only

 

 

x

 

x

When the Apply these permissions to objects and/or containers within this container only check box is selected

Apply onto Applies permissions to current folder Applies permissions to subfolders in current folder Applies permissions to files in current folder Applies permissions to all subsequent subfolders Applies permissions to files in all subsequent subfolders

This folder only

x

 

 

 

 

The folder, subfolders and files

x

x

x

 

 

This folder and subfolders

x

x

 

 

 

This folder and files

x

 

x

 

 

Subfolders and files only

 

x

x

 

 

Subfolders only

 

x

 

 

 

Files only

 

 

x

 

 

For information about where to assign permissions to Active Directory objects, see Best practices for assigning permissions on Active Directory objects (https://go.microsoft.com/fwlink/?LinkId=63971)

For more information about setting permissions, see the following: