removing NT AUTHORITY\authenticated users vs all authenticated users and adding domain group instead

Question

I have a root site collection and under the "Style Resources Readers group" i have the NT AUTHORITY\authenticated and the all authenticated users .

Are these the same groups but with different names? I know the is everyone that can logon o your network.

But i would like to use a domain group instead of the NT AUTHORITY\authenticated?
How can i achieve this?

If i remove the group "NT AUTHORITY\authenticated" how can i add it back? When i tried to add another one i couldn't find it :(

Anyway the mean question ican't find anywhere is how can i restrict some users on the site collection if i don't want everyone to have access?

Thanks in advance

Answer 1

All Authenticated covers all security types where NT AUTHORITY are only the local domain users, so if you are only using local domains they are the same.

The best way of achieving what you want is with active directory, this will allow you to make custom groups for all the users properly, and to make your own blanket permissions.

Answer 2

I would advice not to mess up with these settings. The master page library, as well as the style library (and a few other libraries) requires specific permissions to ensure that everyone (even the one with limited access) can still access to the branding / layout ressources. Since it's somehow mandatory to allow anyone to consume these resources (and will not bring a security breach) I would simply not change it. You might bring additional issue that will be very hard to identify / fix if not documented properly (eg: your AD group users are slightly changed, etc.)

Answer 3

NT AUTHORITY\Authenticated Users and "All Authenticated Users" are one-in-the-same for Active Directory authentication.