Authenticated Users

What is this group for? It's empty by default...
Which Vi$ta component is using it?

--
@~@ Might, Courage, Vision, SINCERITY.
/ v \ Simplicity is Beauty! May the Force and Farce be with you!
/( _ )\ (Xubuntu 7.04) Linux 2.6.24.1
^ ^ 16:39:01 up 2:52 0 users load average: 1.04 1.06 1.02
ºî ´© (CSSA):
http://www.swd.gov.hk/tc/index/site_...ub_addressesa/

On Sat, 09 Feb 2008 16:40:37 +0800, Man-wai Chang ToDie wrote:

> What is this group for? It's empty by default...
> Which Vi$ta component is using it?

It is a computed group. When you are authenticated by the system membership
in Authenticated Users is noted on your access token.

--
Paul Adare
MVP - Virtual Machines
http://www.identit.ca
A list is only as strong as its weakest link. -- Don Knuth

> It is a computed group. When you are authenticated by the system membership
> in Authenticated Users is noted on your access token.

If you are authenticated, then you should be associated with a regular
user account. I see no reason to have a meta account that is not exactly
the user itself, but could access the files of the user.

--
@~@ Might, Courage, Vision, SINCERITY.
/ v \ Simplicity is Beauty! May the Force and Farce be with you!
/( _ )\ (Xubuntu 7.04) Linux 2.6.24.1
^ ^ 17:52:01 up 4:05 0 users load average: 1.00 1.02 1.00
? ? (CSSA):
http://www.swd.gov.hk/tc/index/site_...ub_addressesa/

On Sat, 09 Feb 2008 17:54:25 +0800, Man-wai Chang ToDie wrote:

>> It is a computed group. When you are authenticated by the system membership
>> in Authenticated Users is noted on your access token.
>
> If you are authenticated, then you should be associated with a regular
> user account. I see no reason to have a meta account that is not exactly
> the user itself, but could access the files of the user.

You're not understanding the purpose of the group. It is a convenience.
Think of some thing like Active Directory where all user and computer
accounts in the forest need to have read access to the entire forest. Do
you really want to manually add each and every user and computer account to
the DACL of every object in the forest? That's the whole point of
Authenticated Users.

--
Paul Adare
MVP - Virtual Machines
http://www.identit.ca
APL is a write-only language. -- Roy Keir

> You're not understanding the purpose of the group. It is a convenience.
> Think of some thing like Active Directory where all user and computer
> accounts in the forest need to have read access to the entire forest. Do
> you really want to manually add each and every user and computer account to
> the DACL of every object in the forest? That's the whole point of
> Authenticated Users.

I don't feel comfortable about accounts like this... I rather be
tedious. Security, right? No reason dreaming to be easy ....


--
@~@ Might, Courage, Vision, SINCERITY.
/ v \ Simplicity is Beauty! May the Force and Farce be with you!
/( _ )\ (Xubuntu 7.04) Linux 2.6.24.1
^ ^ 18:26:01 up 4:39 0 users load average: 1.02 1.05 1.00
? ? (CSSA):
http://www.swd.gov.hk/tc/index/site_...ub_addressesa/

> You're not understanding the purpose of the group. It is a convenience.
> Think of some thing like Active Directory where all user and computer
> accounts in the forest need to have read access to the entire forest. Do
> you really want to manually add each and every user and computer account to
> the DACL of every object in the forest? That's the whole point of
> Authenticated Users.

Talk to Pentagon. Ask them whether they have this kind of accounts?


--
@~@ Might, Courage, Vision, SINCERITY.
/ v \ Simplicity is Beauty! May the Force and Farce be with you!
/( _ )\ (Xubuntu 7.04) Linux 2.6.24.1
^ ^ 18:50:01 up 5:03 0 users load average: 1.05 1.05 1.00
? ? (CSSA):
http://www.swd.gov.hk/tc/index/site_...ub_addressesa/

>> you really want to manually add each and every user and computer
>> account to
>> the DACL of every object in the forest? That's the whole point of
>> Authenticated Users.
>
> Talk to Pentagon. Ask them whether they have this kind of accounts?

Sorry, not accounts, I meant BADGES. :P

--
@~@ Might, Courage, Vision, SINCERITY.
/ v \ Simplicity is Beauty! May the Force and Farce be with you!
/( _ )\ (Xubuntu 7.04) Linux 2.6.24.1
^ ^ 18:52:01 up 5:05 0 users load average: 1.06 1.04 1.00
? ? (CSSA):
http://www.swd.gov.hk/tc/index/site_...ub_addressesa/

Man-wai Chang ToDie wrote:
>>> you really want to manually add each and every user and computer
>>> account to
>>> the DACL of every object in the forest? That's the whole point of
>>> Authenticated Users.
>>
>> Talk to Pentagon. Ask them whether they have this kind of accounts?
>
> Sorry, not accounts, I meant BADGES. :P
>

but then... security is something that everyone wants but could never
quite have it... job security? marriage security? :P ^.^

--
@~@ Might, Courage, Vision, SINCERITY.
/ v \ Simplicity is Beauty! May the Force and Farce be with you!
/( _ )\ (Xubuntu 7.04) Linux 2.6.24.1
^ ^ 19:36:01 up 5:49 0 users load average: 1.04 1.04 1.00
? ? (CSSA):
http://www.swd.gov.hk/tc/index/site_...ub_addressesa/