Authenticated Users

  • Thread starter Thread starter Agostino
  • Start date Start date
A

Agostino

What is the 'Authenticated Users' special account used for? It seems to be
similar to Everyone, except for the fact that everyone means all the users
that have 'phisical access' to network, so an old win98 without login

can access resources that grant access to 'Everyone'. 'Authenticated Users'
means a user that correctly logs on the domain. Is it correct? Why
'Authenticate Users' group complete name is

'NT AUTHORITY\Authenticated Users' and not 'MY-DOMAIN\Authenticated Users'?

Thanks for your help
 
Agostino said:
What is the 'Authenticated Users' special account used for? It seems to be
similar to Everyone, except for the fact that everyone means all the users
that have 'phisical access' to network, so an old win98 without login

can access resources that grant access to 'Everyone'. 'Authenticated
Users'
means a user that correctly logs on the domain. Is it correct? Why
'Authenticate Users' group complete name is

'NT AUTHORITY\Authenticated Users' and not 'MY-DOMAIN\Authenticated
Users'?

Thanks for your help
Click to expand...

Everyone is everyone and any user account from the domain and any trusted
domain, including the Guest, IUSR & IWAM accounts. AUthenticated User do not
include Guest, IUSR & the IWAM accounts.

Recommendation for share permissions:
Authenicated Users = Change
Administrators = FC

Then lock it down in the NTFS Security permissions. Since the system uses
the Most Restrictive permissions when evaluating the share and security
permissions, then you are safe by locking it down only in the security
permissions.

For example, say an account called "Joe" comes in across the network or
locally, and Joe is set to Read in the NTFS permissions, Joe will ONLY have
Read.


--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services
Infinite Diversities in Infinite Combinations.
=================================
 
Back
Top