When you set advanced permissions on files and folders, you can use the Permission Entry for <Object Name> dialog box to set which descendant objects will inherit permissions.

To find this dialog box, click Advanced on the access control user interface. On the Permissions tab, click Edit twice.

In the Permission Entry for <Object Name> dialog box, the Apply onto box on the Object tab lists the locations where you can apply permissions. How these permissions are applied depends on whether you select the Apply these permissions to objects and/or containers within this container only check box.

Important

For Active Directory objects, not only do the specified objects in the Apply onto box inherit the access control entries but all child objects also receive a copy of that ACE. The child objects not specified in the Apply onto box do not use the ACE whose copy they receive, but if enough objects get copies of this ACE, that increased amount of data can cause serious performance problems to your network.

By default, this check box is cleared. See the following tables for details about how the inherited permissions are applied:

When the Apply these permissions to objects and/or containers within this container only check box is cleared

Apply onto Applies permissions to current folder Applies permissions to subfolders in current folder Applies permissions to files in current folder Applies permissions to all subsequent subfolders Applies permissions to files in all subsequent subfolders

This folder only

x

 

 

 

 

This folder, subfolders, and files

x

x

x

x

x

This folder and subfolders

x

x

 

x

 

This folder and files

x

 

x

 

x

Subfolders and files only

 

x

x

x

x

Subfolders only

 

x

 

x

 

Files only

 

 

x

 

x

When the Apply these permissions to objects and/or containers within this container only check box is selected

Apply onto Applies permissions to current folder Applies permissions to subfolders in current folder Applies permissions to files in current folder Applies permissions to all subsequent subfolders Applies permissions to files in all subsequent subfolders

This folder only

x

 

 

 

 

This folder, subfolders, and files

x

x

x

 

 

This folder and subfolders

x

x

 

 

 

This folder and files

x

 

x

 

 

Subfolders and files only

 

x

x

 

 

Subfolders only

 

x

 

 

 

Files only

 

 

x

 

 

Additional references

For information about where to assign permissions to Active Directory objects, see Best practices for assigning permissions on Active Directory objects (http://go.microsoft.com/fwlink/?LinkId=63971).

For more information about setting permissions, see the following:

  • How Effective Permissions Are Determined
  • Set, View, Change, or Remove Permissions on an Object