Solved

"USERS" and "Domain Users" Group

Posted on 2004-08-12
4
236 Views
Last Modified: 2010-04-19
What is the difference between the USERS and the Domain Users groups?

I noticed that USERS have read/list permissions by default to server directories. What's the point of adding the DOMAIN USERS group in this case, and do I need to REMOVE the USERS group if I wnat to lock down a directory?
0
Comment
Question by:PilotGav
4 Comments
 
LVL 8

Expert Comment

by:jodypeet
ID: 11790912
Think of domain users as "authenticated users" and users as "everyone" ...you  would normally remove the evryone group and only allow domain users. Or i would anyway .

Hope it helps
0
 
LVL 1

Accepted Solution

by:
012Uvongo earned 125 total points
ID: 11790960
The Users Group is a Local Group and the Domain Users is a global group
Member of the Users Group have rights on their Workstations to run applications to create local users and to manage them, they are able to shutdown and lock their workstations Domain Users, all users are part of this global group and the global group is part of the local Users Group of each workstation in the domain.

Remember.
U = User in Global Groups
G = Global Groups in Local Groups
L = Local Groups permissions on your resource
Y = your resource

Native mode
U= Users
G= Global groups
U = Universal groups
L = Local groups
P = Permissions

and

U= Users
U= Universal groups
L = Local groups
P = Permissions


Hope this helps
Uvongo
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Join & Write a Comment

I have never ceased to be amazed how many problems you can encounter on a fresh install of a Windows operating system.  This is certainly case in point& Unable to complete ANY MSI installation.  This means Windows Updates are failing and I can't …
Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now