Authenticated Users configuration is incorrect for Hosted Exchange

[This topic is intended to address a specific issue called out by the Exchange Server Analyzer Tool. You should apply it only to systems that have had the Exchange Server Analyzer Tool run against them and are experiencing that specific issue. The Exchange Server Analyzer Tool, available as a free download, remotely collects configuration data from each server in the topology and automatically analyzes the data. The resulting report details important configuration issues, potential problems, and nondefault product settings. By following these recommendations, you can achieve better performance, scalability, reliability, and uptime. For more information about the tool or to download the latest versions, see "Microsoft Exchange Analyzers" at]  

Topic Last Modified: 2005-11-17

The Microsoft® Exchange Server Analyzer Tool queries the Active Directory® directory service to determine whether the Exchange Server environment is configured as a Hosted Exchange environment. If the Exchange Server environment is a Hosted Exchange environment, the Exchange Server Analyzer queries Active Directory to determine whether the Authenticated Users group is part of the Pre-Windows® 2000 Compatible Access group in the domain.

If the Authenticated Users group is a member of the Pre-Windows 2000 Compatible Access group, the Exchange Server Analyzer displays a warning. This is not a recommended configuration for a Hosted Exchange solution.

To fix this warning, remove Authenticated Users from the Pre-Windows 2000 Compatible Access security group

  1. Open Active Directory Users and Computers.

  2. Expand the domain node and then click the Builtin container.

  3. Right-click the Pre-Windows 2000 Compatible Access security group and select Properties.

  4. Click the Members tab.

  5. Select Authenticated Users.

  6. Click Remove.

  7. Click OK.

For more information about Hosted Exchange environments, see the following articles: