Solved

"USERS" and "Domain Users" Group

Posted on 2004-08-12
4
239 Views
Last Modified: 2010-04-19
What is the difference between the USERS and the Domain Users groups?

I noticed that USERS have read/list permissions by default to server directories. What's the point of adding the DOMAIN USERS group in this case, and do I need to REMOVE the USERS group if I wnat to lock down a directory?
0
Comment
Question by:PilotGav
4 Comments
 
LVL 8

Expert Comment

by:jodypeet
ID: 11790912
Think of domain users as "authenticated users" and users as "everyone" ...you  would normally remove the evryone group and only allow domain users. Or i would anyway .

Hope it helps
0
 
LVL 1

Accepted Solution

by:
012Uvongo earned 125 total points
ID: 11790960
The Users Group is a Local Group and the Domain Users is a global group
Member of the Users Group have rights on their Workstations to run applications to create local users and to manage them, they are able to shutdown and lock their workstations Domain Users, all users are part of this global group and the global group is part of the local Users Group of each workstation in the domain.

Remember.
U = User in Global Groups
G = Global Groups in Local Groups
L = Local Groups permissions on your resource
Y = your resource

Native mode
U= Users
G= Global groups
U = Universal groups
L = Local groups
P = Permissions

and

U= Users
U= Universal groups
L = Local groups
P = Permissions


Hope this helps
Uvongo
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

825 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question