Network group

I have a windows 2003 server, and there is a group called network that has
full permissions to everything on all the disk partitions. What is this
group, and why the full perms to everything? This is apparently the default
behavour, or at least that's the way Dell sent me the server. My other 2003
server, which I installed, does not have this group listed in any of its
perms.

thank you,

Roger
Fri Nov 04 16:54:01 CST 2005

If Dell set it up that way perhap you should ask them.
What you describe is certainly neither the OS default nor is
it a recommened config.
Network is a well-known for any account that has done a
network login (as compared to an Interactive login).
Now, one caution. The pseudo-group Network is a sid that
gets stuffed into the user token of an account that has logged
in over the network (done a login type 3).
There is however also the Network Service built-in account and
sometimes this is shown in interfaces simply as Network.

--
Roger Abell
Microsoft MVP (Windows Server : Security)
MCDBA, MCSE W2k3+W2k+Nt4
"Bill" <Bill@discussions.microsoft.com> wrote in message
news:53291F35-B9CA-46F5-86DE-0DD59D25C8EA@microsoft.com...
>I have a windows 2003 server, and there is a group called network that has
> full permissions to everything on all the disk partitions. What is this
> group, and why the full perms to everything? This is apparently the
> default
> behavour, or at least that's the way Dell sent me the server. My other
> 2003
> server, which I installed, does not have this group listed in any of its
> perms.
>
> thank you,

Lanwench
Fri Nov 04 21:50:55 CST 2005



In news:53291F35-B9CA-46F5-86DE-0DD59D25C8EA@microsoft.com,
Bill <Bill@discussions.microsoft.com> typed:
> I have a windows 2003 server, and there is a group called network
> that has full permissions to everything on all the disk partitions.
> What is this group, and why the full perms to everything? This is
> apparently the default behavour, or at least that's the way Dell sent
> me the server. My other 2003 server, which I installed, does not
> have this group listed in any of its perms.
>
> thank you,

Who/what is a member of this group?
I've never seen this before, but then again, the minute I get a new server,
I wipe & reinstall it myself because I'm a control freak. You might want to
call Dell and ask them about it, depending on your support contract with
them.

Bill
Sun Nov 06 18:08:53 CST 2005

it turns out the permissions were only set for a particular folder and its
contents. The consultant, who placed the folder there for an HR program to
run from the network added the network group. I was unable to find the
network group in the local groups, but did find a domain group network. What
I didn't fully understand was what how the group worked. No users are
specifically part of the group, at least they don't have the network group
listed in there user properties. Any user who connected to the folder, which
was shared, had the full perms given to the network group. It caught me of
guard, and sort of had me feeling like I just started administering windows
security when in fact I've been doing it for more than 5 years. I do thank
you for your explanation regarding the group however, just goes to show, you
can never know it all.



"Roger Abell [MVP]" wrote:

> If Dell set it up that way perhap you should ask them.
> What you describe is certainly neither the OS default nor is
> it a recommened config.
> Network is a well-known for any account that has done a
> network login (as compared to an Interactive login).
> Now, one caution. The pseudo-group Network is a sid that
> gets stuffed into the user token of an account that has logged
> in over the network (done a login type 3).
> There is however also the Network Service built-in account and
> sometimes this is shown in interfaces simply as Network.
>
> --
> Roger Abell
> Microsoft MVP (Windows Server : Security)
> MCDBA, MCSE W2k3+W2k+Nt4
> "Bill" <Bill@discussions.microsoft.com> wrote in message
> news:53291F35-B9CA-46F5-86DE-0DD59D25C8EA@microsoft.com...
> >I have a windows 2003 server, and there is a group called network that has
> > full permissions to everything on all the disk partitions. What is this
> > group, and why the full perms to everything? This is apparently the
> > default
> > behavour, or at least that's the way Dell sent me the server. My other
> > 2003
> > server, which I installed, does not have this group listed in any of its
> > perms.
> >
> > thank you,
>
>
>