Security AlwaysFilter Providers RpcId is the RPC Protocol Extensions security provider value specified in section 2.2.1.1.7. Reserved by AlwaysFilter Microsoft Other NeverFilter Organization Extensible NeverFilter S-1-6 SiteServer AlwaysFilter Authority S-1-7 Internet Site AlwaysFilter Authority S-1-8 Exchange AlwaysFilter Authority S-1-9 Resource AlwaysFilter Manager Authority S-1-10 Passport NeverFilter Authority Invalid Invalid SIDs AlwaysFilter crealm Filtering When decoding a TGT, the crealm fields inside the TGT are compared to the expected name of the realm for the inter-realm trust. If the names do not match the TGT, they are rejected, subject to other mitigating constraints.<42> These constraints can include allowing fully trusted domains to supply any crealm name on the basis that it would have validated it prior to passing it along, or any other settings that are established out of band. The full set of constraints is implementation-specific. Index of Security Fields Security field Section Supplemental credential encryption Signature generation
Security Providers RpcId is the RPC Protocol Extensions security provider value specified in section 2.2.1.1.7. AlwaysFilter Reserved by Microsoft AlwaysFilter Other Organization NeverFilter Extensible NeverFilter S-1-6 SiteServer Authority AlwaysFilter S-1-7 Internet Site Authority AlwaysFilter S-1-8 Exchange Authority AlwaysFilter S-1-9 Resource Manager Authority AlwaysFilter S-1-10 Passport Authority NeverFilter Invalid Invalid SIDs AlwaysFilter crealm Filtering When decoding a TGT, the crealm fields inside the TGT are compared to the expected name of the realm for the inter-realm trust. If the names do not match the TGT, they are rejected, subject to other mitigating constraints.<42> These constraints can include allowing fully trusted domains to supply any crealm name on the basis that it would have validated it prior to passing it along, or any other settings that are established out of band. The full set of constraints is implementation-specific. Index of Security Fields Security field Section Supplemental credential encryption Signature generation