I have been asked by my client regarding these scenario in the organization:
a) We have some XX users (with ID issued by XX, eg XXxxxxx) and currently is not in our AD. b) We wish allow these group of users to be able to access to certain folders in our site A via their XX account c) However, we would not wish to allow them to have access to site B. They should only be able to access to a few selected folders in Site A, but not site B or other folders.
One approach i have thought of was to add these XX users to the AD and inside a security group. remove the Everyone from the sharepoint permissions of Site B. then add these specific AD group users to site A with the necessary permission.
is my approach correct or are there any repercussions with removing the Everyone . permission? and is it also the same as NT AUTHORITY\Authenticated Users?