Ad Authenticated Users Vs Domain Users

If you have multiple ad domain then authenticated users group is forest wide but domain users group is domain limited.

Ad authenticated users vs domain users. A bit more detail. Authenticated users contains users from trusted domains too. Authenticated users is available when applying permissions directly to an object or can be placed in built in and user created local computer groups. Domain users group contains all users from the domain the group belongs to.

This is a built in group that cannot be modified. Authenticated users cannot be added as a member to another user created domain groups global domain local or universal. The authenticated users group includes all users whose identities were authenticated when they logged on. Authenticated users was first introduced in windows nt 4 0 sp3.

Authenticated users encompasses all users who have logged in with a username and password. The authenticated users group contains users who have authenticated to the domain or a domain that is trusted by the computer domain. Domain group authenticated users contains local users domain users and users from trusted domains too. Everyone encompasses all users who have logged in with a password as well as built in non password protected accounts such as guest and local service.

Authenticated users specifically does not contain the built in guest account but will contain other users created and added to domain guests. If the above descriptions were a tad oversimplified for you here is some more detail. Local group is the above statement correct. Domain users contains all users from the domain the group belongs to.

Please disable your ad block. This includes local user accounts as well. Authenticated users and domain users members if i understand if you have one active domain then authenticated users group and domain users group is the same thing.