Re: Best practice on setting permissions with authenticated users

Hello Trilix,

Best practise in this case is different for everybody. What will you like to achive? Should users be able to create/delete every folder under the top level?Bbetter think about folders for every branch with special branch groups, so that they only can "destroy" theire own folder srtructure and not from another branch, which can happen if you use Authenticated users.

Best regards

myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.



Hi,

Can someone tell me what the best practice is when you need to give
all users on the domain modify rights on a network share?

At this moment we have given "Authenticated users" modify rights.

I was thinking of putting "Authenticated users" in a global group and
putting that in a domain local group ...

Is this the way to go or am I totally wrong here?

Thanks,
Jurgen


.

Relevant Pages

  • Re: Directory Permissions - What gives?
    ... OK I can agree with that and "I stand corrected" on the guest account. ... Authenticated Users groups. ... If you had the parent folder shared at Everyone=FULL or even better ... permissions from the parent folder and add Group B and have inheritance ...
    (microsoft.public.windows.server.general)
  • Re: Directory Permissions - What gives?
    ... guest account isn't member of authenticated users ... However, if you've enabled the Guest account, ... you'll find that users who have logged on as Guest are members of Everyone ... again no matter what type of access you need to grant in the folder or sub ...
    (microsoft.public.windows.server.general)
  • Re: By-pass traverse checking is not working
    ... folder a drilling down through folder, b, c, d; access is blocked to d even ... heirarchy has by-pass checked for Authenticated Users. ...
    (microsoft.public.win2000.security)
  • Re: Assigning permissions to users
    ... would like to assign folder permissions to various groups. ... Only Domain Admins have right to add or delete ... Also below Administration is a folder called Forms. ... Authenticated Users: C ...
    (microsoft.public.win2000.active_directory)
  • RE: NTFS permissions on E2K3 database folders
    ... Mdbdata folder. ... Even the users who are non-mail enabled users have permissions to ... Authenticated Users and Power Users groups need access? ...
    (microsoft.public.exchange.setup)