Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

NT AUTHORITY\Authenticated Users

Posted on 2013-11-11
5
Medium Priority
?
1,981 Views
Last Modified: 2013-11-11
Who exactly is NT AUTHORITY\Authenticated Users? I am trying to risk assess who can access a certain folder and this group appears, but I cant find it in AD, who is in it? Why would you need to add that group to a particular folder ACL? Will removing it break anything?
0
Comment
Question by:pma111
  • 3
  • 2
5 Comments
 
LVL 18

Expert Comment

by:Emmanuel Adebayo
ID: 39638670
Authenticated Users includes all users whose identities were authenticated when they logged on.

http://support.microsoft.com/kb/243330

Regards
0
 
LVL 3

Author Comment

by:pma111
ID: 39638682
Sorry I dont really understand that - does it mean every user in the domain?
0
 
LVL 18

Expert Comment

by:Emmanuel Adebayo
ID: 39638691
Yes these are the users that are autehnticated by your Active directory.
0
 
LVL 3

Author Comment

by:pma111
ID: 39638724
So in a nutshell if one of your folders grants read access to NT AUTHORITY\Authenticated Users - then every user in the network can access it?
0
 
LVL 18

Accepted Solution

by:
Emmanuel Adebayo earned 2000 total points
ID: 39638858
Yes, you are right.

You allow this account permission to your folder only when you are convinced that you are willing to grant whatever permission was set to all who can successfully log on to the domain network because the permission will allow access to this account for everyone in the domain. If you find that you don't want to grant premission to everyone for that folder, i suggest  you remove it.

regards
0

Featured Post

[Webinar On Demand] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Suggested Courses

578 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question