Authenticated Users

A

Agostino

What is the 'Authenticated Users' special account used for? It seems to be
similar to Everyone, except for the fact that everyone means all the users
that have 'phisical access' to network, so an old win98 without login

can access resources that grant access to 'Everyone'. 'Authenticated Users'
means a user that correctly logs on the domain. Is it correct? Why
'Authenticate Users' group complete name is

'NT AUTHORITY\Authenticated Users' and not 'MY-DOMAIN\Authenticated Users'?

Thanks for your help
 
A

Ace Fekay [MVP]

Agostino said:
What is the 'Authenticated Users' special account used for? It seems to be
similar to Everyone, except for the fact that everyone means all the users
that have 'phisical access' to network, so an old win98 without login

can access resources that grant access to 'Everyone'. 'Authenticated
Users'
means a user that correctly logs on the domain. Is it correct? Why
'Authenticate Users' group complete name is

'NT AUTHORITY\Authenticated Users' and not 'MY-DOMAIN\Authenticated
Users'?

Thanks for your help

Everyone is everyone and any user account from the domain and any trusted
domain, including the Guest, IUSR & IWAM accounts. AUthenticated User do not
include Guest, IUSR & the IWAM accounts.

Recommendation for share permissions:
Authenicated Users = Change
Administrators = FC

Then lock it down in the NTFS Security permissions. Since the system uses
the Most Restrictive permissions when evaluating the share and security
permissions, then you are safe by locking it down only in the security
permissions.

For example, say an account called "Joe" comes in across the network or
locally, and Joe is set to Read in the NTFS permissions, Joe will ONLY have
Read.


--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services
Infinite Diversities in Infinite Combinations.
=================================
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top