Everyone Group

[Guest SuperPlay]

Hi Folks

 

Query relating to the "everyone group (Pre Windows 20000)."

 

We have a Windows 2003 domain which was upgraded from Windows NT 4.0.

 

I am aware under windows 2003 that the membership of the everyone was

changed so that it no longer contains the token for anonymous.

 

It seems that newly created users are no longer automatically added to the

everyone group but they are added to the "domain users" group.

 

However the "everyone" group is still the default group set on permissiosn

tabs (Shares ETC)

 

Question:

 

So is it best practice to

 

1) Manally add all individual domain users to the "Everyone Group"

 

2) Clear all users from the "Everyone Group" and change the share

permissiosn etc from "Everyone" to "Domain Users"

 

3) Something else?

 

Or is is the case that "Everyone" now includes a security token for all

domain users, so there is no need for them to be manually listed in the

membership of the group?

 

cheers

 

SuperPlay