NTFS permission, local users and share permissions confusion

for years now, work, file servers have shares "domain\authenticated users" change permissions on them. ntfs permissions set per security group (and in cases specific users if need be).
works great, specific groups or users can access share (and whatever allowed according ntfs permissions).

here @ home i'm playing hyper-v free 2016 tp3, , created share storing iso files.
wanting use more powershell used new-smbshare cmdlet create share.
microsoft still uses share permissions, instead of authenticated users more secure imo, surprise able access share using domain user. couldn't write, read.

after digging around, found out server's local users group has domain users in it's list.
reading old links why still doesn't make clear me why domain users should part of local users group of server. sounds silly me.

the fileservers @ work aren't old. server 2012, i've administered them same way in 2008 r2 , 2003. can't remember ever seeing local users filled domain users security group.

have missed in past years, or supposed let go of ntfs permissions , use share permissions instead?
latter sound dangerous me in case share gone, whatever reason, , have no clue permissions users/groups. that's why on ntfs side.

hope can shed light on one, , i'm missing here.

hi,

from article, domain users in local users group default. applies earlier operation systems well:

https://technet.microsoft.com/en-us/library/cc785098(v=ws.10).aspx

users:

members of group can perform common tasks, such running applications, using local , network printers, , locking server. users cannot share directories or create local printers. by default, domain users, authenticated users, , interactive groups members of group. therefore, user account created in the domain becomes member of group.

as not have there, can set policy remove group local users group.

---

please remember mark replies answers if , un-mark them if provide no help. if have feedback technet support, contact tnmff@microsoft.com.

Windows Server  >  File Services and Storage