Re: Default Domain Users group

It is normal in some shops to remove Domain Users and replace this
with domain group(s) that should have access, whether this is done
on member servers or client machines.

Roger

"Pete" <Pete@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:7B65A2F5-31C0-40CF-9015-8D2DD48F4C07@xxxxxxxxxxxxxxxx
Hello,
Would it be safe for me to remove Domain users group from servers local
users group? I understand the purporse of this group on the workstations
side
but not sure why it would be in the server that has joined Domain.

If no local security restrictions are in place then any domain users will
be
able to log into the server via console.


Thank you in advance for your suggestions and reading this post!!


.

Relevant Pages

  • Problem Disabling "Null Session" on W2K3
    ... I scan then (w2k3 AD Servers) with Retina and it says that i have "Null Session" enabled, so it shows all the domain users. ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence ...
    (Security-Basics)
  • Re: A user that only has access to shared network folders
    ... Domain users are denied 'local logon' privilidges on the servers, ... if the user is a standard and you are using NTFS ... then enforcing a Mandatory Profile on the user would achieve that. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Prevent users from login into servers
    ... I looked at User rights, ... is part of the local Admins, which I assume explains the issue. ... Check one of your servers to see if it has in fact been ... I change them to "Domain Users" at a minimum... ...
    (microsoft.public.windows.server.setup)
  • Re: Remote Web Workplace computers missing from list
    ... only visible to administrators. ... Except for "Application" Servers, if any, which domain users do ... finding that one station is not in the list to connect to. ...
    (microsoft.public.windows.server.sbs)
  • Re: Prevent users from login into servers
    ... I'm *still* running into places 6 years later where "everyone" has rights to certain resources. ... I change them to "Domain Users" at a minimum... ... I have pushed down Domain admins and Local Admins. ... Check one of your servers to see if it has in fact been ...
    (microsoft.public.windows.server.setup)