Home | Resource Guides | Tech Tips | Network Administration | Hardware | Certification

Tech Tips › Windows XP › Security

Tech Tips / Windows XP / Security

Everyone is not everyone everywhere

The security model of operating systems based on the NT kernel (Windows NT 4, Windows 2000, Windows XP, etc.) uses user accounts and groups to assign permissions.

Most of these groups and accounts are created by the administrator; however, some are built into the operating system. The Everyone group, which is present on all NT systems, is one such example. Although it's helpful that Microsoft used the same group on all systems, they are not consistent; the Everyone group has a slightly different meaning on each system.

In Windows NT, the Everyone group represented all users, including those who connected with their username and password, Guest accounts, and so-called anonymous users who had no username and password. In Windows 2000, the Everyone group still includes anonymous users and guests, but Microsoft added another group, called Authenticated Users, which doesn't include anonymous users and guests. This has changed yet again in Windows XP where, by default, anonymous users are not included in the Everyone group. The Everyone group still includes the Guest accounts, however. The following list will help you memorize this.

Windows NT 4:
Everyone means everyone—anonymous users and guests.

Windows 2000:
Everyone still means everyone—anonymous users and guests. Authenticated Users include all users who have a username and password. It does not include anonymous users and guests.

Windows XP:
Everyone does not include anonymous users but it does include guests. Authenticated Users include users who have a username and password.

You can, of course, change this behavior and add anonymous users back to the Everyone group.

1. Open the Local Security Policy console in the Administrative Tools folder.
2. Browse to Computer Configuration\Windows Settings\Security Settings\
   Local Policies\Security Options.
3. Double-click the Network access: Let Everyone Permissions Apply To
   Anonymous Users.
4. Check the Enabled option.