Users and Everyone

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Chapter 12 in the 270 self paced book tips to say remove <everyone> from the printing permissions and replace it with <users>.
Is this such an improvement in security? The way i am thinking, everyone would be all the <things> XP adds on i.e guest, operating system etc, compared to Users which would be <all users>.

Si (waiting to be corrected)

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

the book seems to be quite vague on who comes under everyone and who comes under the users

 

You can see who belongs to each group via MMC, but just can't see the security benefit myself.

Si

 

u r quite right there, doesnt seem to be any improvement from the security point of view...yeah probably the only things that will be prevented is the guest and OS being removed, meanwhile when it comes to users they will need to be in the user group...

y didnt i think of that

 

If I remember correctly........Everyone means just that, EVERYONE, Including unathenticated/Anonomous users and users only allows authenticated users.

Nelix

 

Nelix,

thanks. Perhaps it is because whenever they mention networking/groups and users i always associate it with a domain set-up. In this case unless you are a domain member you can't do <nowt> anyhow.

Thanks

Si

 

thanks for clearing that up. From people's experience of the 270, are the majority of the questions based on workgroup or domain?
I remember Zimbo saying he wishes he studied 270 and 290 together.

Si

 

Spark,

that is just it, seperating workgroup set-ups from Domains.
Unless you have a user account and password, you cannot log on to the domian which in my book means they are authenticated and ready to go.
A work group is a different kettle of fish....

Si

 

si i understood it as Users is more secure than Everyone because Everyone group also contains the guest account...

Authenticated is more secure out of the three because for obvious reasons the user account has authenticated against a DC...


some areas in 270 and 290 i found similar... some that come to my head now are printers and NTFS permissions...

 

thanks for all your input

 

Christ.
You'd never guess that I've been out of the office this afternoon...

 

he he he

 

thanks for clarifying that Spark.

Si

 

no, you are right there Spark. Thanks for posting.

Si