We help IT Professionals succeed at work.
Get Started
domain users in local users group on servers
Looking for some opinions here. When a server is joined to the domain, the domain users group is automatically added to the local users group on that server. Has anyone noticed anything harmful or anything to watch for in removing this?
We disabled log on locally a while ago but that wasn't the issue we encountered. This gave all users the ability to create folders and files and have read access on all the shares by default unless this was implicitly removed. We had a user get infected with a ransom-ware virus and it was able to browse, server by server, every share on every server and try to encrypt these files. (shares were not mapped) We found it was able to read the files and create an encrypted version but not able delete the old copy so we didn't lose any data. This did, however, imply to me that this default action on a server is a security risk.
Should domain users be removed from the local users group on servers?
We disabled log on locally a while ago but that wasn't the issue we encountered. This gave all users the ability to create folders and files and have read access on all the shares by default unless this was implicitly removed. We had a user get infected with a ransom-ware virus and it was able to browse, server by server, every share on every server and try to encrypt these files. (shares were not mapped) We found it was able to read the files and create an encrypted version but not able delete the old copy so we didn't lose any data. This did, however, imply to me that this default action on a server is a security risk.
Should domain users be removed from the local users group on servers?
Why Experts Exchange?
Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.
Jim Murphy
Programmer at Smart IT Solutions
When asked, what has been your best career decision?
Deciding to stick with EE.
Mohamed Asif
Technical Department Head
Being involved with EE helped me to grow personally and professionally.
Carl Webster
CTP, Sr Infrastructure Consultant
Ask ANY Question
Connect with Certified Experts to gain insight and support on specific technology challenges including:
- Troubleshooting
- Research
- Professional Opinions
Did You Know?
We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE