Where to find authenticated users in ad

In Windows, there are certain special groups that are created by the system and that are used for special purposes. A list of these special groups includes:. Because you cannot alter the membership of these groups, the groups are not listed in Active Directory Users and Computers Dsa. However, these groups are useful for operations such as assigning permissions to directories, files, shared network directories, or printers.

Users become members of these special groups depending on the operation that they're trying to perform. For example, a user gains the Interactive group membership in their token whenever they use a computer locally. The Network group would be added to a user's token anytime that a user connects over the network to a computer.

I added it to the "Users" group for instance. I realize that this probably no longer has anything to do with your actual problem - I'm off in the weeds now - but I thought this was neat. Here is me in my domain in which I have deleted the "Authenticated Users" foreign security principal, and rebooted both my DCs.

I will post this as an answer, because it's the standard way of doing things. It is not the fix and I hope someone does post a good technical answer, and they should get the checkmark , but it is a guaranteed way to get the fix and is definitely something that future readers should know is an option. You should describe more-fully the problems you're seeing and what troubleshooting that you have done so far.

Sign up to join this community. The best answers are voted up and rise to the top. Stack Overflow for Teams — Collaborate and share knowledge with a private group. Create a free Team What is Teams? Learn more. Asked 7 years, 1 month ago. Active 7 years, 1 month ago. Viewed 8k times. A set of steps on fixing this besides finding the genius who did it and causing severe injuries is more than welcome Thanks.

Improve this question. Is the AD restore bin an option? The change is over days old — dyasny. Authenticated Users will contain all manually created user accounts in all trusted domains regardless of whether they are a member of the Domain Users group or not. Authenticated Users specifically does not contain the built-in Guest account, but will contain other users created and added to Domain Guests. The following list shows the members who are fall under this group.

The local computer account is always a member of the Authenticated Users group even when disconnected from the network. However, just like Domain Users, the local computer account must first authenticate to the domain to be considered part of the Authenticated Users token when connecting remotely to other computers within its trusted domains. Authenticated Users is available when applying permissions directly to an object, or can be placed in Built-in and user created Local computer groups.

Authenticated Users cannot be added as a member to another user created domain groups Global, Domain Local, or Universal.