Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

Please forgive the novice question, but I can't seem to find the answer.

Is there a way to allow any user access to a SharePoint site without having to add them to a group or turn on anonymous access?

I have a client who's SharePoint site is behind AD authentication with no anonymous access, and he wants everyone in the farm to be able to see his document library.

share|improve this question
add comment

2 Answers 2

up vote 4 down vote accepted

Yes, absolutely. In 2010+, it's the group NT AUTHORITY\authenticated users

Before that, it was "All Authenticated Users"

share|improve this answer
3  
And in 2013 it's "Everyone" as well as NT AUTHORITY\authenticated users –  Robert Lindgren Jun 24 '13 at 14:35
    
Perfect, thank you for your quick response. –  Justin Kohnen Jun 27 '13 at 13:52
add comment

Expanding on what others have written above, in SharePoint 2010 and 2013 it depends on the type of authentication you've setup your Web Application with.

For classic mode you only have windows authentication so NT AUTHORITY\authenticated users will grant access to anyone that can authenticate with a valid windows credential.

For claims mode you'll have at least three options:

  1. All Authenticated Users - All users regardless of authentication type used
  2. All Users (windows) - All users that authenticate with windows authentication
  3. All Users (providername) - All users that authenticate with forms authentication, you should replace providername with the name of the provider you defined for that Web Application / Zone

You can also use the encoded claims which is quite handy and faster to resolve:

  • All Authenticated Users = c:0(.s|true
  • All Users (windows) = c:0!.s|windows
  • All Users (provider) = c:0!.s|forms:provider

You can also use the Domain Users domain group which may be a good choice if you have trusts with multiple domains and only want to grant access to a few domains instead of all authenticated users from all domains. In that case just use DOMAIN\domain users.

share|improve this answer
    
Absolutely awesome break down. Thank you for such a thorough response. –  Justin Kohnen Jun 27 '13 at 13:53
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.