Vista - Re: Authenticated Users

permalink · 02-09-2008

On Sat, 09 Feb 2008 16:40:37 +0800, Man-wai Chang ToDie wrote:

Quote:

> What is this group for? It's empty by default...
> Which Vi$ta component is using it?

It is a computed group. When you are authenticated by the system membership
in Authenticated Users is noted on your access token.

--
Paul Adare
MVP - Virtual Machines
http://www.identit.ca
A list is only as strong as its weakest link. -- Don Knuth

permalink · 02-09-2008

On Sat, 09 Feb 2008 17:54:25 +0800, Man-wai Chang ToDie wrote:

Quote:

>> It is a computed group. When you are authenticated by the system membership
>> in Authenticated Users is noted on your access token.

>
> If you are authenticated, then you should be associated with a regular
> user account. I see no reason to have a meta account that is not exactly
> the user itself, but could access the files of the user.

You're not understanding the purpose of the group. It is a convenience.
Think of some thing like Active Directory where all user and computer
accounts in the forest need to have read access to the entire forest. Do
you really want to manually add each and every user and computer account to
the DACL of every object in the forest? That's the whole point of
Authenticated Users.

--
Paul Adare
MVP - Virtual Machines
http://www.identit.ca
APL is a write-only language. -- Roy Keir

02-09-2008	#1 (permalink)
Paul Adare n/a posts	Re: Authenticated Users On Sat, 09 Feb 2008 16:40:37 +0800, Man-wai Chang ToDie wrote: Quote: > What is this group for? It's empty by default... > Which Vi$ta component is using it? It is a computed group. When you are authenticated by the system membership in Authenticated Users is noted on your access token. -- Paul Adare MVP - Virtual Machines http://www.identit.ca A list is only as strong as its weakest link. -- Don Knuth
My System Specs

02-09-2008	#2 (permalink)
Paul Adare n/a posts	Re: Authenticated Users On Sat, 09 Feb 2008 17:54:25 +0800, Man-wai Chang ToDie wrote: Quote: Quote: >> It is a computed group. When you are authenticated by the system membership >> in Authenticated Users is noted on your access token. > > If you are authenticated, then you should be associated with a regular > user account. I see no reason to have a meta account that is not exactly > the user itself, but could access the files of the user. You're not understanding the purpose of the group. It is a convenience. Think of some thing like Active Directory where all user and computer accounts in the forest need to have read access to the entire forest. Do you really want to manually add each and every user and computer account to the DACL of every object in the forest? That's the whole point of Authenticated Users. -- Paul Adare MVP - Virtual Machines http://www.identit.ca APL is a write-only language. -- Roy Keir
My System Specs

Similar Threads
Thread	Forum
Compare users in AD with an SQL table and insert the missing users	VB Script
Script needed to check Last time a computer authenticated against	PowerShell
SmtpClient.UseDefaultCredentials does not work in Authenticated SM	.NET General
network printer failed to print unless authenticated	Vista networking & sharing