Remove Authenticated Users from the PreWin2000

Question

Hi,

Can we remove the Authenticated Users group from the PreWin2000 group ?

Thanks.

Answer 1

Hello SylvainMALAGRE-1246,

Thank you for posting in our Q&A forum.

After my research, I think you can remove Authenticated Users from the PreWin2000 group.

However, you must or had better test the potential impact of the change in your own environment as you might be using tools or solutions that have come to expect those pre-Win2Kpermissions to be configured in your AD and are using them for legitimate reasons.

Similar thread.
https://social.technet.microsoft.com/Forums/windowsserver/en-US/debf8e7b-4481-40ff-bda4-d1f8d03c1947/removing-authenticated-users-from-prewindows-2000-compatible-access

Another link for your references.
https://www.semperis.com/blog/security-risks-pre-windows-2000-compatibility-windows-2022/#:~:text=Yes%2C%20you%20should%20remove%20Authenticated%20Users%20from%20the,increasing%20the%20security%20posture%20of%20your%20Active%20Directory.

Hope the information above is helpful.

Best Regards,
Daisy Zhou

===============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.