Re: Is every user a member of Users?
From: Les Desser (NewsDump1_at_dessergroup.com)
Date: 01/04/05
- Previous message: Roger Abell: "Re: Is every user a member of Users?"
- In reply to: Steven L Umbach: "Re: Is every user a member of Users?"
- Next in thread: Steven L Umbach: "Re: Is every user a member of Users?"
- Reply: Steven L Umbach: "Re: Is every user a member of Users?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 4 Jan 2005 01:44:00 +0000
In article <x5mCd.20234$wu4.14984@attbi_s52>, Steven L Umbach
<n9rou@n0-spam-for-me-comcast.net> Tue, 4 Jan 2005 01:14:05 writes
>Yes. Anyone who logs on locally for instance is a member of the
>authenticated users group which is a member of the users group. Use the
>" net localgroup users " to see that and use the gpresult support tool
>to see all the groups that a user is a member of.
At least that makes a bit more sense - see below
> Always be extremely carefully when configuring deny user rights when
>adding the users or everyone groups. Exactly what are you trying to
>secure?
I was trying to secure a stand alone W2K Pro PC so that a guest could
browse the web and play some mp3 files but nothing else.
I created a Visitors group and a Visitor user to be its member (rather
then using Gusts/Guest) and Visitor was not a member of Users and
nevertheless Visitor could go anywhere until I removed all permissions
for Users.
I cannot understand having such a security model where Users/User exist
and are granted permissions by default, but if membership of Users is
removed from a user it is STILL a member of Users.
If Users is something special then it should not be possible to assign a
user explicitly to the Users group - something that is done all over the
place by default.
You live and learn - thanks for the quick response. I see bringing
knowledge of a security model from elsewhere to Windows may be
dangerous.
I will pass your response on grc.techtalk where I have come from to get
this sorted.
Thanks again.
-- Les Desser (The Reply-to address IS valid)
- Previous message: Roger Abell: "Re: Is every user a member of Users?"
- In reply to: Steven L Umbach: "Re: Is every user a member of Users?"
- Next in thread: Steven L Umbach: "Re: Is every user a member of Users?"
- Reply: Steven L Umbach: "Re: Is every user a member of Users?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
