Authenticated Users

[TechLad]

Hi,

Does anyone know if the Authenticated Users group is forest or domain wide?

From experience I think it is forest.

Reason :- As a basic user I have connected to a printer (and printed) in domain A when logged on and authenticated in Domain B.

Can anyone just confirm my theory?

Ta...

 

[Davetoo]

I'd have to check, but I'd say the trust relationship between Domain A and B is what's giving you that ability.

 

[TechLad]

Thats what I thought initially.

Domain A and Domain B are both sub domains of Domain Z

Domain A & B are children of Z with transitive trusts

However there are no trusts transitive or otherwise directly between Domain A & B

Ta...

 

[GrnEyedLdy]

The trusts set up between the child domains will be automatic.

From Microsoft:

"If child domains are added to the new domain (making it a domain tree), trust flows upward through the domain tree to the domain tree's root domain, extending the initial trust path created between the domain root and the forest root domain.

In this way, transitive trust relationships flow through all domains in the forest. Authentication requests follow these trust paths, so accounts from any domain in the forest can be authenticated at any other domain in the forest. With a single logon process, those accounts having the proper permissions can potentially access resources on any domain in the forest."



Patty

 

[Davetoo]

There ya go...thanks Patty..saved me the "leg" work. lol