在 Windows 上，Everyone 和 Authenticated Users 组中有哪些人？
声明：本页面是StackOverFlow热门问题的中英对照翻译，遵循CC BY-SA 4.0协议，如果您需要使用它，必须同样遵循CC BY-SA许可，注明原文地址和作者信息，同时你必须将它归于原作者（不是我）：StackOverFlow
原文地址: http://stackoverflow.com/questions/1040353/
Warning: these are provided under cc-by-sa 4.0 license. You are free to use/share it, But you must attribute it to the original authors (not me):
StackOverFlow
On Windows, who is in the Everyone and Authenticated Users groups?
提问by John McAleely
My application uses a Named Pipe to do IPC. What access control should I place on it, to provide broad local only access?
我的应用程序使用命名管道来执行 IPC。我应该对其进行什么访问控制，以提供广泛的本地访问权限？
The pipe is created by the .net 2.0 remoting protocol, and it already has an ACL for the 'NETWORK' group to deny all access, so I think only local users can access it. In my remoting configuration file I need to pick an 'authorizedGroup' who can access this pipe.
管道是由.net 2.0 远程协议创建的，它已经有一个 ACL 用于 'NETWORK' 组来拒绝所有访问，所以我认为只有本地用户可以访问它。在我的远程配置文件中，我需要选择一个可以访问此管道的“authorizedGroup”。
I would like any process running on the local machine to access my named pipe.
我希望在本地机器上运行的任何进程都可以访问我的命名管道。
I would appear to need to select between access for the 'Everyone' Group or the 'Authenticated Users' group. Given the local-only access, what processes might be running under the 'Everyone' group that are not in the 'Authenticated Users' group?
我似乎需要在“所有人”组或“经过身份验证的用户”组的访问权限之间进行选择。鉴于仅限本地访问，哪些进程可能在“所有人”组下运行，但不在“已验证用户”组中？
I'm interested in answers for Windows XP and above.
我对 Windows XP 及更高版本的答案感兴趣。
回答by gbn
"Everyone" is a collective group for "Authenticated Users" and "Guest". Note that for Win 2000 and earlier, it included "Anonymous" too where no checks are made
“Everyone”是“Authenticated Users”和“Guest”的集合组。请注意，对于 Win 2000 及更早版本，它也包括“匿名”，其中不进行检查
"Authenticated Users" is user who has logged into AD and has a login token.
“Authenticated Users”是已登录AD并拥有登录令牌的用户。
My text is paraphrasing of Windows Server 2003 "Security identifiers".
我的文字是对 Windows Server 2003“安全标识符”的解释。
Edit, "Network" from the link:
从链接编辑“网络”：
Includes all users who are logged on through a network connection. Access tokens for interactive users do not contain the Network SID.
包括通过网络连接登录的所有用户。交互式用户的访问令牌不包含网络 SID。
To be honest, I've never thought about this one much... sorry.
老实说，我从来没有想过这个……对不起。
