Re: Difference between a USER and an AUTHENTICATED USER

From: Jorge_de_Almeida_Pinto (UseLinkToEmail_at_WindowsForumz.com)
Date: 07/09/05


Date: 9 Jul 2005 02:40:58 -0400


"" wrote:
> I assume that if you are a USER, are you not already an
> AUTHENTICATED USER?
>
> Can someone tell me the difference between these two groups?
> Why I would
> use one over the other?
> Thanks!
>
> --
> bill
> visual.eyes@telus.net

The users group is somehow a static group and to be precise a domain
local group and specific to a domain. By default domain users global
group is a member of the users domain local group and each user by
default has the domain users global groups ac its primary group. All
of the above specific to a domain.

The authenticated users is a computed group which it does not have
members. During authenticatoin by a DC this group is added to the
security token. If you are authenticated by a DC in domain A and in
domain B the authenticated users have permissions assigned the user
from domain A can access the resource in domain b. The authenticated
users is also a member of users so the end result will be the same.
Permissions omst of the time are assigned to authenticated users and
not to the users group

Cheers,

-- 
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/Security-Difference-USER-AUTHENTICATED-USER-ftopict554685.html
Visit Topic URL to contact author (reg. req'd).  Report abuse: http://www.windowsforumz.com/eform.php?p=1761878


Relevant Pages

  • Re: Is every user a member of Users?
    ... in a default scenario you will see that Interactive ... >and Authenticated Users are nested within Users. ... I am just a starter on the Windows security front, ... time) a member via a hidden route. ...
    (microsoft.public.win2000.security)
  • Re: Is every user a member of Users?
    ... "Les Desser" wrote in message ... > member of Users when they are anyway a member of ... An account is automatically added to users as a part of the ... if you do not let INTERACTIVE and/or Authenticated Users ...
    (microsoft.public.win2000.security)
  • Re: The Users group: a security problem
    ... Steven L Umbach wrote: ... > special group and authenticated users is a member of the users group ... > domain computer can belong to such as one of mine as shown below for ...
    (microsoft.public.security)
  • Re: Is every user a member of Users?
    ... >> he stops being a member of Users. ... if you do not let INTERACTIVE and/or Authenticated Users be ... >in fact stop that account from being a member of Users. ... PS - just been reading an other of your replies, ...
    (microsoft.public.win2000.security)
  • Re: Windows Server 2003 Auto connect printers;
    ... The Domain Users group is a member of the build in Users, ... Yes the TS is a member server, Authenticated Users is added to the local ...
    (microsoft.public.win2000.termserv.apps)