Authenicated Users Query

From: gmickelsen (gmickelsen_at_discussions.microsoft.com)
Date: 06/02/05 

Date: Thu, 2 Jun 2005 06:14:05 -0700

Simplified Scenario of our configuration:

We have a W2K3 DC which hosts a share (share permissions:
Authenticated Users = Read Access;
NTFS permission :Administrators = Full Control)

We have a PC (not part of the domain, but in its own workgroup). This PC can
open the share on the server when logged in as a local administrator and see
the contents.

Firstly, shouldn't the fact that no users (apart from Administrators)
prevent the local user on this PC from being able to open the share?
Or are the permissions combined?

Secondly, shouldn't Authenticated Users only allow users who are logged on
to the domain to access the resource?

I'm sure this is quite a simple query for many of you.
Many thanks in advance.

Relevant Pages

  • Re: Authenicated Users Query
    ... Have you tried your test at a time when the test non-domain PC is ... > We have a W2K3 DC which hosts a share (share permissions: ... shouldn't the fact that no users (apart from Administrators) ... shouldn't Authenticated Users only allow users who are logged on ...
    (microsoft.public.windows.server.security)
  • Re: Can I hide my personal information from administrators of a domain?
    ... >> If you are not a local administrator, there is almost nothing you can do ... >> permissions to allow different access. ... >> access to domain administrators - but they can change those permissions, ... >> member of the domain, and you would be pretty much on your own. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Problems with hiding the Builtin OU
    ... In other words change or remove permissions on the the administrators ... group object itself. ... no "checkmarks" it may still have permissions at the advanced settings. ... > By removing the list content attributes for Authenticated Users, ...
    (microsoft.public.win2000.security)
  • Re: Can I hide my personal information from administrators of a domain?
    ... The system cannot change your password now because the domain RNE is not ... > What you can do partially depends on whether you are a local administrator ... > permissions to allow different access. ... > access to domain administrators - but they can change those permissions, ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Restrict the ability to rename the local administrator accoun t
    ... Have you tried resetting the permissions on the relevant registry keys? ... You could change the Set Value permission for Administrators to DENY. ... Restrict the ability to rename the local administrator account ...
    (Focus-Microsoft)