在 Windows 上，Everyone 和 Authenticated Users 组中有哪些人? [英] On Windows, who is in the Everyone and Authenticated Users groups?

问题描述

我的应用程序使用命名管道来执行 IPC.我应该对其进行什么访问控制，以提供广泛的本地访问权限?

My application uses a Named Pipe to do IPC. What access control should I place on it, to provide broad local only access?

管道是由.net 2.0远程协议创建的，并且它已经有一个用于'NETWORK'组的ACL来拒绝所有访问，所以我认为只有本地用户可以访问它.在我的远程配置文件中，我需要选择一个可以访问此管道的authorizedGroup".

The pipe is created by the .net 2.0 remoting protocol, and it already has an ACL for the 'NETWORK' group to deny all access, so I think only local users can access it. In my remoting configuration file I need to pick an 'authorizedGroup' who can access this pipe.

我希望本地机器上运行的任何进程访问我的命名管道.

I would like any process running on the local machine to access my named pipe.

我似乎需要在Everyone"组或Authenticated Users"组的访问权限之间进行选择.鉴于仅限本地访问，哪些进程可能在所有人"组下运行而不属于已认证用户"组?

I would appear to need to select between access for the 'Everyone' Group or the 'Authenticated Users' group. Given the local-only access, what processes might be running under the 'Everyone' group that are not in the 'Authenticated Users' group?

我对 Windows XP 及更高版本的答案感兴趣.

I'm interested in answers for Windows XP and above.

推荐答案

Everyone"是经过身份验证的用户"和来宾"的集体组.请注意，对于 Win 2000 及更早版本，它也包括匿名"，其中不进行检查

"Everyone" is a collective group for "Authenticated Users" and "Guest". Note that for Win 2000 and earlier, it included "Anonymous" too where no checks are made

Authenticated Users"是指已登录 AD 并拥有登录令牌的用户.

"Authenticated Users" is user who has logged into AD and has a login token.

我的文字是对 Windows Server 2003 "安全的解释标识符".

My text is paraphrasing of Windows Server 2003 "Security identifiers".

从链接中编辑网络":

包括所有登录的用户通过网络连接.使用权交互式用户的令牌不包含网络 SID.

Includes all users who are logged on through a network connection. Access tokens for interactive users do not contain the Network SID.

老实说，我从来没有想过这个……抱歉.

To be honest, I've never thought about this one much... sorry.

这篇关于在 Windows 上，Everyone 和 Authenticated Users 组中有哪些人?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！