Huge Bug in security Filesystem of NTFS ?

  • Thread starter Thread starter Max
  • Start date Start date
M

Max

Hi people,

on my Vista Ultimate I have just create another user account, (for a friend
of my) how is only members of USERS

on my HDD E:\ the security rights are those:

Authenticated users = ~Full control
SYSTEM = ful control
Administrators = full control
and
Users = Read & execute, List folder contents, Read

but with this new account I can still remove thing on E:\ !!!!!!!!

(the security settings of the delete test file are the same as the root
Disk)

So what happen ??
 
ok now I have remove the "Authenticated users" privilege on a file to test
and now it working he cannot delete this file,

but what is this new group under Vista ? and why "simple Users" by default
can delete file !!!!
and why under managing Local Users & Groups I can't see the group
Authenticated users ??

thx people
 
"Max" <twinsen24@hotmail.com> wrote in message
news:9317D38F-B72D-4AA1-B1B5-972B15F55A74@microsoft.com...
>
> ok now I have remove the "Authenticated users" privilege on a file to
> test and now it working he cannot delete this file,
>
> but what is this new group under Vista ? and why "simple Users" by default
> can delete file !!!!
> and why under managing Local Users & Groups I can't see the group
> Authenticated users ??
>
> thx people

You cannot see Authenticated Users under Local Users & Groups as it not a
group you can add or remove anyone from.
It is a computed group that represents all accounts that are currently
correctly authenticated by the local security subsystem on that device.

--

Mike Brannigan
 
The dynamic group "Authenticated Users" was added in Windows NT 4.0 Service
Pack 4. It is hardly new.
---
Your question may already be answered in Windows Vista Security:
http://www.amazon.com/gp/product/0470101555?ie=UTF8&tag=protectyourwi-20


"Mike Brannigan" wrote:

> "Max" <twinsen24@hotmail.com> wrote in message
> news:9317D38F-B72D-4AA1-B1B5-972B15F55A74@microsoft.com...
> >
> > ok now I have remove the "Authenticated users" privilege on a file to
> > test and now it working he cannot delete this file,
> >
> > but what is this new group under Vista ? and why "simple Users" by default
> > can delete file !!!!
> > and why under managing Local Users & Groups I can't see the group
> > Authenticated users ??
> >
> > thx people
>
> You cannot see Authenticated Users under Local Users & Groups as it not a
> group you can add or remove anyone from.
> It is a computed group that represents all accounts that are currently
> correctly authenticated by the local security subsystem on that device.
>
> --
>
> Mike Brannigan
>
 
I never said it was new - maybe you meant to reply to the original poster.

--

Mike Brannigan
"Jesper" <Jesper@discussions.microsoft.com> wrote in message
news:977D3F5C-BCC3-4149-8343-75E2C747708F@microsoft.com...
> The dynamic group "Authenticated Users" was added in Windows NT 4.0
> Service
> Pack 4. It is hardly new.
> ---
> Your question may already be answered in Windows Vista Security:
> http://www.amazon.com/gp/product/0470101555?ie=UTF8&tag=protectyourwi-20
>
>
> "Mike Brannigan" wrote:
>
>> "Max" <twinsen24@hotmail.com> wrote in message
>> news:9317D38F-B72D-4AA1-B1B5-972B15F55A74@microsoft.com...
>> >
>> > ok now I have remove the "Authenticated users" privilege on a file to
>> > test and now it working he cannot delete this file,
>> >
>> > but what is this new group under Vista ? and why "simple Users" by
>> > default
>> > can delete file !!!!
>> > and why under managing Local Users & Groups I can't see the group
>> > Authenticated users ??
>> >
>> > thx people
>>
>> You cannot see Authenticated Users under Local Users & Groups as it not a
>> group you can add or remove anyone from.
>> It is a computed group that represents all accounts that are currently
>> correctly authenticated by the local security subsystem on that device.
>>
>> --
>>
>> Mike Brannigan
>>
 
Back
Top