RE: Bypass Traverse Checking?

BTW, as a quick side note, I do not wish to imply that Domain Users = Authenticated Users, because they are significantly different (different types of groups, different membership, different capabilities in terms of population), and if an ACL contains only the SID for Authenticated Users, an account without that SID in its token would not be able to access the resource.

So, to reiterate, by changing "Everyone" to "Authenticated Users" in an ACL, you are affecting Anonymous Logon (null connections) and the _builtin_ Guest account (one account, not the guest groups). That's it. You are not affecting Guests, nor are you affecting Domain Guests.

Just wanted to make sure I wasn't being unclear. :-)

Laura

> -----Original Message-----
Received on Tue Jan 28 14:05:51 2003