Re: Authenticated Users

Tech-Archive recommends: Speed Up your PC by fixing your registry

Jorge Silva wrote:
Hi
I agree with the other guys having authenticated users group has members of the Domain Admins is not a good thing, and represents security issues for all FOREST. It would be nice to urgently check why that is configured in that way and for what.

I know that this will be a worst kind of post because I don't know why it is in this way and I will assume but ... from my experience such "things" are done because some applications are not working without administrative rights on workstations, somebody wasn't aware of Restricted groups and as an effect we have this ....

.... but these are mine assumptions.

--
Tomasz Onyszko
http://www.w2k.pl/ - (PL)
http://blogs.dirteam.com/blogs/tomek/ - (EN)
.

Relevant Pages

  • Re: windows new users?
    ... Sorry, my mistake, they are members of the "Users" group. ... These accounts are on all my XP machines, they're not a result of virus activity. ... It appear as a username and not a group although it is named "userS" in the account name and they are security principal identifier accounts.. ... With the ever increasing push to secure and lock down machines those without the Authenticated Users group will hit into a brick wall! ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Authenticated Users
    ... the Domain Admins is not a good thing, ... We found the authenticated users group being a member of the Domain ... Can any body shed any light on this, and also is this security risk? ...
    (microsoft.public.windows.server.active_directory)
  • Re: windows new users?
    ... Sooner or later you *will* have problems with your Server 2003 installation if you remove these groups, you will have problems with many of your server tools if the Authenticated Users group is not present. ... This Authenticated Users group was created to plug security holes with the Null Sessions, ... WHY microsoft are MAKING them to logon BY DEFAULT?? ...
    (microsoft.public.windowsxp.setup_deployment)
  • Which accounts are in the Authenticated Users group ?
    ... members of the Authenticated Users group? ... Sorry if these seems like a stupid question, but I can't seem to find a ... Steve ...
    (microsoft.public.win2000.security)
  • Re: Distribution List Changes
    ... Can you double check double click the DL, go to security tab, advanced ... Check to see who has "Write member" permissions. ... James Chong (MVP) ... enable him to read the group only via the Authenticated Users group. ...
    (microsoft.public.exchange.admin)