Authenticated users

[Mike]

What is included in authenticated users Group?

I ask this for example in the new GPMC, I show the Default Domain Policy is
applied by Authenticated users. Are computer accounts included in that
group? If not, why do computer settings still get applied even if there are
no computers specified to apply group policy?

Mike

 

[Darren Mar-Elia]

Mike-
Yes, all user and computer accounts are included in Authenticated Users. If
you want to exclude certain computers, you need to remove the Authenticated
Users ACE and then explicitly grant computer groups the read and apply group
policy rights on a GPO to allow them to process it.

 

[Roger Abell [MVP]]

Authenticated Users includes any account, user or computer,
in the forest that went through an authentication process.
IOW this is about everything except Anonymous User and
unauthenticated guests (if any).