none
difference between domain users and authenticated users RRS feed

  • Question

  • guys,

    i need to find the difference between authenticated users and domain users. When will i use the first(and why) and when the second?

    Many thanks for any explanation. 

    Friday, May 15, 2020 7:22 AM

All replies

  • Hi,

    Authenticated Users

    Is the group that contains users who have authenticated to a domain or a domain that is trusted by the computer domain. It includes all users whose identities were authenticated when they logged on. In a multiforest Active Directory (AD) environment, Authenticated Users not only includes all users with valid credentials in the local forest and its domains, but also users from other forests that access resources in the local forest using valid credentials and using a forest or external inter-forest trust relationship.

    Domain Users

    Is the group in which we can add or remove members that we can not do in the Authenticated Users group.
    In a domain environment, the Administrator account and all new user accounts are automatically included as members of this group. By default all users created in the domain are automatically members of this group.

    When configuring file/folder permissions, by default the "Users" (Domain users) group is configured to have access to the file/folder, while Authenticated Users are not.

    In circumstances in which you want to grant permissions to everyone except the Guest and Anonymous users, you must use the Authenticated Users group.

    Best regards,
    Leon


    Blog: https://thesystemcenterblog.com LinkedIn:



    • Edited by Leon Laude Friday, May 15, 2020 8:14 AM
    Friday, May 15, 2020 8:08 AM
  • many thanks for the reply. So the guests and anonymous are also member of the domain users?

    Or is using the authenticated users more restrictive compared to the domain users?

    When i check the users group, it has the domain users, the authneticated users and interactive as members. 


    • Edited by enlil Friday, May 15, 2020 12:54 PM
    Friday, May 15, 2020 12:52 PM
  • The "Users" (Domain Users) is the only one that can be classified as a "group", it is a global group in the domain and it can only contain users that are members of same domain the Domain Users group resides in. 

    By default all users created in the domain are automatically members of this group, except for the default guest account.

    Because Domain Users normally contains only user accounts and can be directly controlled by the administrator it is generally considered the most secure group of the three listed.

    Authenticated Users will contain all manually created user accounts in all trusted domains regardless of whether they are a member of the Domain Users group or not.


    Blog: https://thesystemcenterblog.com LinkedIn:

    Friday, May 15, 2020 1:30 PM
  • Hi,

    Thanks for posting here!

    For your last question,the default Guest account in the domain is not a member of the domain user group, instead it is placed in the Domain Guest group.

    For more information , you can refer to the following link:

    https://support.microsoft.com/en-au/help/243330/well-known-security-identifiers-in-windows-operating-systems

    Best Regards,

    Fan


    Please remember to mark the replies as an answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Monday, May 18, 2020 12:53 AM
  • Hi,

     

    Just checking in to see if the information provided was helpful. Please let us know if you would like further assistance.

     

    Best Regards,

    Fan

     


    Please remember to mark the replies as an answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Wednesday, May 20, 2020 7:47 AM
  • Hi

    As this thread has been quiet for a while, we will propose it as ‘Answered’ as the information provided should be helpful. If you need further help, please feel free to reply this post directly so we will be notified to follow it up.

    Again thanks for your time and have a nice day!

    Fan


    Please remember to mark the replies as an answers if they help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

    Friday, May 22, 2020 2:08 AM