NT AUTHORITY\Authenticated Users

Posted on 2013-11-11
Last Modified: 2013-11-11
Who exactly is NT AUTHORITY\Authenticated Users? I am trying to risk assess who can access a certain folder and this group appears, but I cant find it in AD, who is in it? Why would you need to add that group to a particular folder ACL? Will removing it break anything?
Question by:pma111
  • 3
  • 2
LVL 17

Expert Comment

by:Emmanuel Adebayo
ID: 39638670
Authenticated Users includes all users whose identities were authenticated when they logged on.


Author Comment

ID: 39638682
Sorry I dont really understand that - does it mean every user in the domain?
LVL 17

Expert Comment

by:Emmanuel Adebayo
ID: 39638691
Yes these are the users that are autehnticated by your Active directory.

Author Comment

ID: 39638724
So in a nutshell if one of your folders grants read access to NT AUTHORITY\Authenticated Users - then every user in the network can access it?
LVL 17

Accepted Solution

Emmanuel Adebayo earned 500 total points
ID: 39638858
Yes, you are right.

You allow this account permission to your folder only when you are convinced that you are willing to grant whatever permission was set to all who can successfully log on to the domain network because the permission will allow access to this account for everyone in the domain. If you find that you don't want to grant premission to everyone for that folder, i suggest  you remove it.


Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
AD backup 6 59
paging file usage  > 95% for 30 min about 12 33
Need to replace W2003 server with Win2008R2. 3 28
Trust relationship when doing server upgrades 3 17
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
Know what services you can and cannot, should and should not combine on your server.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question