Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Re: Authenticated Users and Builtin Users
Re: Authenticated Users and Builtin Users [message #158961] Wed, 22 July 2009 04:59 Go to next message
Kevin Gallagher  is currently offline Kevin Gallagher
Messages: 18
Registered: July 2009
Junior Member
Thanks for the replies.
I have set up delegated administration for ongoing system administration.
Should I put the authenticated users group back into the built-in users
group?

"Meinolf Weber [MVP-DS]" wrote:

> Hello Kevin,
>
> I agree with Marcin about not changing the default membership. If you need
> special configurations create your own security groups, where you can modify
> all needed permissions.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Is it Microsoft best practice to remove Authenticated Users from
> > Builtin\Users group? My system is setup thus but we are debating
> > putting Authenticated Users back into the Builtin Users group as we
> > are getting SRMSVC warning messages in our event log, see this
> > article: http://support.microsoft.com/kb/924035. What are the security
> > implications for adding Authenticated Users back?
> >
>
>
>
Re: Authenticated Users and Builtin Users [message #158988 is a reply to message #158961] Wed, 22 July 2009 11:09 Go to previous message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Kevin Gallagher" <KevinGallagher@discussions.microsoft.com> wrote in message news:A158CC4B-DA45-435B-A979-E610A0A5C089@microsoft.com...
> Thanks for the replies.
> I have set up delegated administration for ongoing system administration.
> Should I put the authenticated users group back into the built-in users
> group?
>

If you had removed them manually, yes, that would be prudent. There are other aspects in the OS that uses these builtin groups that may cause problems if they'be been changed.

Ace
Previous Topic:Re: priority user login to DC
Next Topic:Can I view multiple domains in one AD Users and Computers Window?
Goto Forum:
  


Current Time: Fri Oct 20 03:03:12 EDT 2017

Total time taken to generate the page: 0.05786 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software