Re: Do all login users secretly belong to the Users group?

From: Dave (noone_at_nowhere.com)
Date: 05/12/05 

Date: Thu, 12 May 2005 14:39:52 -0400

from the description of the guests group:
"Guests have the same access as members of the Users group by default,
except for the Guest account which is further restricted"

i seem to remember something about this happens because 'authenticated
users' is part of the users group or some such thing like that. but i
wouldn't try removing that, it may have other undesired effects.

"sparky62" <sparky62@discussions.microsoft.com> wrote in message
news:095DFEA0-C5A2-4C38-8549-D60C4E32B5A8@microsoft.com...
>I create a new user, make it a member of the Guests group and explicitly
> remove it
> from the Users group (so that the new user is a member of the Guests group
> and no other group).
>
> Strangely this new user has the "effective permissions" to "read &
> execute"
> a file as if it was in the Users group. This is very odd behaviour.
>
> My file has an ACL with "full control" ACEs for
> SYSTEM, Administrators and CURRENT OWNER (Administrator), and a "read &
> execute" ACE for the "Users" group (and no other ACEs).
>
> Also if I log on as the new user in the Guests group I can read the file
> too.
>
> What is going on?
>

Relevant Pages

  • RE: Access is Denied to Event Viewer logs
    ... Also open the local guests group, ... Access is Denied to Event Viewer logs ... | I am afraid the Administrator is not a member of the Guest group. ...
    (microsoft.public.win2000.security)
  • Re: Is every user a member of Users?
    ... >authenticated users group which is a member of the users group. ... I cannot understand having such a security model where Users/User exist ... You live and learn - thanks for the quick response. ...
    (microsoft.public.win2000.security)
  • Re: Protecting the All Users Start Menu
    ... domain user account objects are members of the local Power Users group. ... I am sure that you know, the Domain Users is, by default, a member of the ... that the user be a member of the local Administrators group. ...
    (microsoft.public.win2000.active_directory)
  • Re: Anonymous user access problem.
    ... is the new Test user a memberof USERS group? ... > was not able to access ftp server using anonymous user. ... > and made it member of guests group only and I am able to access FTP site ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Local Users Group - Safefly removing users ?
    ... what remains in the Users group. ... if only locally defined non-guest accounts ... no. Denying local login is done with the Deny login locally user right. ... Notice that I have a few times qualified with "member" by which I have ...
    (microsoft.public.security)