Strange Accounts?

[Peter och Maria Rydqvist]

Hi!

I have a Windows 2003 domain running in 2000 Native mode. The domain
has been upgraded from a Windows 2000 native domain.

When I look at the OU ForeignSecurityPrincipals I see "Authenticated
Users", "NETWORK SERVICE", "INTERACTIVE" and "ENTERPRISE DOMAIN
CONTROLLERS".

Who added them?

I deleted them once on my Windows 2000 domain, but after the upgrade
they seem to have been added again.

Can I delete them without problem?

Is there a program that can check for all "old" accounts that are
listed in permissions to shares and NTFS?

Another thing, if I look at the Domain Users group the Authenticated
Users are listed as members. When I assign permission for the Domain
Users the Domain Guests also get permissions since they are
Authenticated Users.

Is this really correct? Can I without any adverse effect remove
Authenticated Users from the Domain Users group?

/Peter

 

[Simon Geary]

These groups are created automatically by Windows, do not delete them.

An authenticated user is one who authenticates against a trusted domain.
Guest accounts do not go through this authentication process.