Select the Scope of Authentication for Users

Membership in Domain Admins or Enterprise Admins , or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at http://go.microsoft.com/fwlink/?LinkId=83477.

To select the scope of authentication using the Windows interface

1. Open Active Directory Domains and Trusts. To open Active Directory Domains and Trusts, click Start , click Administrative Tools , and then click Active Directory Domains and Trusts .
   To open Active Directory Domains and Trusts in Windows Server® 2012, click Start , type domain.msc .
2. In the console tree, right-click the domain node for the domain that you want to administer, and then click Properties .
3. On the Trusts tab, under either Domains trusted by this domain (outgoing trusts) or Domains that trust this domain (incoming trusts) , do one of the following:
   • To select the scope of authentication for users that are authenticating through an external trust, click the external trust that you want to administer, and then clickProperties . On the Authentication tab, click either Domain-wide authentication or Selective authentication .
     
   • To select the scope of authentication for users that are authenticating through a forest trust, click the forest trust that you want to administer, and then clickProperties . On the Authentication tab, click either Forest-wide authentication or Selective authentication .