My understanding of the difference is that 'Users' is a
group you would have to add a user to (default when creating
a new user in W2K). So only those who you have specifically
added to that group (or allowed to remain a member) would
have the rights and permission's of that group.

'Authenticated Users' includes anyone who has been
Authenticated on the Server. So if someone logs in to the
server (non-anonymous connection) they would have the rights
and permission's assigned to this group by default.

John

                                                                                                                       
                    "Loschiavo,
                    Dave" To: "'focus-mssecurityfocus.com '" <focus-mssecurityfocus.com>
                    <DLoschiavofrcc cc:
                    .cc.ca.us> Subject: Users -vs- Authentciated Users
                                                                                                                       
                    07/05/2001 06:30
                    PM
                                                                                                                       
                                                                                                                       

Can someone please explain the functional differences
between the built-in
groups "Users" and "Authenticated Users" in Windows 2000?
I'd like to
understand what practical differance there is in assigning a
right or
permission to the group "Users" instead of the group
"Authenticated Users",
and vice versa. I'd also gladly accept a URL to a site that
explains the
same.

I'm looking over security guidelines published by the NSA
and DISA, and the
NSA is using Users, while DISA is using Authenticated Users.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]