Authenticated users

  • Thread starter Thread starter Mike
  • Start date Start date
M

Mike

What is included in authenticated users Group?

I ask this for example in the new GPMC, I show the Default Domain Policy is
applied by Authenticated users. Are computer accounts included in that
group? If not, why do computer settings still get applied even if there are
no computers specified to apply group policy?

Mike
 
Mike-
Yes, all user and computer accounts are included in Authenticated Users. If
you want to exclude certain computers, you need to remove the Authenticated
Users ACE and then explicitly grant computer groups the read and apply group
policy rights on a GPO to allow them to process it.
 
Authenticated Users includes any account, user or computer,
in the forest that went through an authentication process.
IOW this is about everything except Anonymous User and
unauthenticated guests (if any).
 
Back
Top