Authenticated Users and Everyone are not the same, and the difference
between them has nothing to do with the Guest account or Guests/Domain
Guests groups. In Windows 2000 and earlier, Everyone includes Anonymous
Logon. In Win2K3, the Anonymous Logon account was removed from the Everyone
group. Mixed-mode domains (Win2K) and Windows 2000 mixed functional level
domains (Win2K3) have nothing whatsoever to do with the membership of the
Everyone group. Mixed mode/FL relating to groups is about whether or not you
can create universal security groups and fully utilize domain local groups.
Last, the built-in Guest account is part of both Authenticated Users *and*
Everyone.

An old post I wrote so I don't have to type the details up again:

http://www.derkeiler.com/Mailing-Lists/securityfocus/focus-ms/2003-01/0046.h
tml


Laura 

> -----Original Message-----
> From: Trevor [mailto:[EMAIL PROTECTED] 
> Sent: Wednesday, April 19, 2006 7:41 PM
> To: [email protected]
> Subject: RE: Internet security on "hotspots"
> 
> How about looking into using IPSec with a Pre-shared key 
> (since the home user likely does not have a Cert Authority or AD)?
> 
> That link does have a few misnomers.  Using "Authenticated 
> Users" on shares over Everyone is only necessary in a 
> mix-mode domain.  Otherwise, AU and Everyone are the same (as 
> 2000 removed Guest from the Everyone group).
> 
> -Trevor
> 
> -----Original Message-----
> From: ilaiy [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, April 19, 2006 9:03 AM
> To: [EMAIL PROTECTED]
> Cc: Agent Zr0; [email protected]
> Subject: Re: Internet security on "hotspots"
> 
> Came across this checklist for home users which is pretty good ..
> 
> [url] 
> http://labmice.techtarget.com/articles/winxpsecuritychecklist.htm
> [/url]
> 
> ./thanks
> ilaiy
> 
> --------------------------------------------------------------
> ----------
> ---
> --------------------------------------------------------------
> ----------
> ---
> 
> 
> --------------------------------------------------------------
> -------------
> --------------------------------------------------------------
> -------------
> 


---------------------------------------------------------------------------
---------------------------------------------------------------------------

Reply via email to