Re: Authenticated Users

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance


"Agostino" <agostino_sclauzero@xxxxxxxxxxx> wrote in message
news:u4zdKUlrFHA.3424@xxxxxxxxxxxxxxxxxxxxxxx
> What is the 'Authenticated Users' special account used for? It seems to be
> similar to Everyone, except for the fact that everyone means all the users
> that have 'phisical access' to network, so an old win98 without login
>
> can access resources that grant access to 'Everyone'. 'Authenticated
> Users'
> means a user that correctly logs on the domain. Is it correct? Why
> 'Authenticate Users' group complete name is
>
> 'NT AUTHORITY\Authenticated Users' and not 'MY-DOMAIN\Authenticated
> Users'?
>
> Thanks for your help

Everyone is everyone and any user account from the domain and any trusted
domain, including the Guest, IUSR & IWAM accounts. AUthenticated User do not
include Guest, IUSR & the IWAM accounts.

Recommendation for share permissions:
Authenicated Users = Change
Administrators = FC

Then lock it down in the NTFS Security permissions. Since the system uses
the Most Restrictive permissions when evaluating the share and security
permissions, then you are safe by locking it down only in the security
permissions.

For example, say an account called "Joe" comes in across the network or
locally, and Joe is set to Read in the NTFS permissions, Joe will ONLY have
Read.


--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services
Infinite Diversities in Infinite Combinations.
=================================


.

Relevant Pages

  • Re: Unlock acct permissions
    ... Joe is one of the best in the world. ... How do I get DSACLS to run on a specific account? ... The permissions in the security do not seem>>> to ... The correct permissions are on the security group, ...
    (microsoft.public.win2000.active_directory)
  • Re: RSOP Planning Security problem
    ... This would mean maintaining a separate account just for this purpose. ... thats correct, thats why you have accounts and permissions. ... I have also granted "Authenticated Users" permission for "RSOP Planning" and "RSOP Logging" on the OU which contains the workstation account. ...
    (microsoft.public.scripting.vbscript)
  • Re: Problems on DNS
    ... If you changed the default permissions to only ADministrators, ... Authenticated Users Modify and System Full Control. ... account, so you can be safe there. ...
    (microsoft.public.windows.server.dns)
  • Re: permit computer objects to rename themselves.
    ... This is going to require account operators or administrators access on DCs unfortunately. ... Joe Richards Microsoft MVP Windows Server Directory Services ... I have a script which runs as a Computer StartUp script (applied by ... permissions on the AD Computer Object to allow appropriate permissions ...
    (microsoft.public.windows.server.active_directory)
  • Re: Secure upload page 2
    ... There are a few things to take into account here. ... Suppose the upload is trying ... find the ./here folder in Explorer and set permissions ... "Joe" wrote in message ...
    (microsoft.public.inetserver.iis.security)