Re: whats the difference...

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Bill <Bill@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
between the Everyone group, and the Authenticated Users group? is a
share more secure when given to Authenticated Users as apposed to the
Everyone group?

Hi - "everyone" is the least secure.

http://windowsitpro.com/article/articleid/23581/should-you-use-the-authenticated-users-group.html
may help describe the difference.

For your users' data folders, it's best to use neither, in my opinion. Use
your own AD security groups ("Company Users," "Management," "Accounting,"
etc.)

However, for *share* permissions, I think I'm not alone in using "everyone"
and granting it full control - because I use NTFS permissions to lock down
the folders themselves.


.

Relevant Pages

  • Re: Authenticated users question
    ... I removed the authenticated users from the data folders ... > Full Control rights are hardly necessary on data folders. ... you should prolly not even assign permissions to ...
    (microsoft.public.windows.server.security)
  • Re: Authenticated users question
    ... If you have a file folder that's listing 'Authenticated Users' ... Full Control rights are hardly necessary on data folders. ... you should prolly not even assign permissions to ...
    (microsoft.public.windows.server.security)
  • Re: whats the difference...
    ... Bill requesting assistance, typed the following: ... share more secure when given to Authenticated Users as apposed to the ... Microsoft Certified Trainer ...
    (microsoft.public.windows.server.active_directory)
  • Re: whats the difference...
    ... Authenticated Users group requires that the user be authenticated via a DC to get access to ressources. ... Everyone group can access ressources without authentication, less secure. ... only reply to Newsgroups ...
    (microsoft.public.windows.server.active_directory)
  • Re: shares too visible
    ... In my Experience "Authenticated Users" seem to include local usernames ... and passwords as well - during tests I did many years ago it appears ... you will be much more secure ...
    (microsoft.public.windows.server.security)