SID filter quarantining

A strict form of security identifier (SID) filtering that is applied to external trust relationships by default, which prevents any SIDs that are not part of the trusted quarantined domain from traversing the trust relationship. This type of filtering helps prevent malicious users in the quarantined domain from gaining unauthorized, privileged access to the trusting domain. SID filter quarantining was designed to be applied to external trust relationships. It should not be applied to forest trust relationships, trusts within a domain, or trusts within a forest that has a forest functional level of Windows 2000. See also: <##>SID filtering