Define domain-based GPOs clarification.

Question

The learn path https://learn.microsoft.com/en-us/training/modules/implement-group-policy-objects/4-define-domain-based-gpos?source=learn mentions following thing:

The Default Domain Policy GPO is linked to the domain, and it applies to Authenticated Users.

While "Authenticated Users" is capitalized and technically absolutely correct, newcomers would benefit from knowing that "Authenticated Users" is a well-known SID, a special identity group, and that's why it is capitalized.

Answer 1

Hi Maxim Fomin,

Thank you for reaching out to Microsoft Q & A forum. 

The Default Domain Policy GPO applies to "Authenticated Users," which is a well-known Security Identifier (SID) in Active Directory. This group includes all entities that have successfully authenticated to the domain, such as users, computers, and services. Unlike "Domain Users," it covers all authenticated accounts, not just those within the domain. This ensures that policy settings are applied broadly. If more specific targeting is needed, Security Groups or WMI filters can be used. 

Please feel free to contact us if you have any additional questions.     

If you have found the answer provided to be helpful, please click on the "Accept answer/Upvote" button so that it is useful for other members in the Microsoft Q&A community.        

Thank you.