Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

Please forgive the novice question, but I can't seem to find the answer.

Is there a way to allow any user access to a SharePoint site without having to add them to a group or turn on anonymous access?

I have a client who's SharePoint site is behind AD authentication with no anonymous access, and he wants everyone in the farm to be able to see his document library.

share|improve this question

2 Answers 2

up vote 5 down vote accepted

Yes, absolutely. In 2010+, it's the group NT AUTHORITY\authenticated users

Before that, it was "All Authenticated Users"

share|improve this answer

Expanding on what others have written above, in SharePoint 2010 and 2013 it depends on the type of authentication you've setup your Web Application with.

For classic mode you only have windows authentication so NT AUTHORITY\authenticated users will grant access to anyone that can authenticate with a valid windows credential.

For claims mode you'll have at least three options:

  1. All Authenticated Users - All users regardless of authentication type used
  2. All Users (windows) - All users that authenticate with windows authentication
  3. All Users (providername) - All users that authenticate with forms authentication, you should replace providername with the name of the provider you defined for that Web Application / Zone

You can also use the encoded claims which is quite handy and faster to resolve:

  • All Authenticated Users = c:0(.s|true
  • All Users (windows) = c:0!.s|windows
  • All Users (provider) = c:0!.s|forms:provider

You can also use the Domain Users domain group which may be a good choice if you have trusts with multiple domains and only want to grant access to a few domains instead of all authenticated users from all domains. In that case just use DOMAIN\domain users.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.
{"cc_re__cc_re__cc_by_sa_3_0": ["                  <li><a href=\"//area51.stackexchange.com\" title=\"proposing new sites in the Stack Exchange network\">Area 51</a></li>\r\n                        <li><a href=\"//careers.stackoverflow.com\">Stack Overflow Careers</a></li>\r\n                    \r\n                </ol>\r\n            </td>\r\n    </tr>\r\n</table>\r\n                </div>\r\n            </div>\r\n\r\n            <div id=\"copyright\">\r\n                site design / logo &#169; 2015 stack exchange inc; user contributions licensed under <a href=\"http://creativecommons.org/licenses/by-sa/3.0/\" rel=\"license\">cc by-sa 3.0</a> \r\n                with <a href=\"http://blog.stackoverflow.com/2009/06/attribution-required/\" rel=\"license\">attribution required</a>\r\n            </div>\r\n            <div id=\"svnrev\">\r\n                rev 2015.5.1.2550\r\n            </div>\r\n            \r\n        </div>\r\n    </div>\r\n    <noscript>\r\n        <div id=\"noscript-warning\">SharePoint Stack Exchange works best with JavaScript enabled<img src=\"http://pixel.quantserve.com/pixel/p-c1rF4kxgLUzNc.gif\" alt=\"\" class=\"dno\"></div>\r"], "copyright__copyright__copyright": ["0!.s|forms:provider\n\nYou can also use the Domain Users domain group which may be a good choice if you have trusts with multiple domains and only want to grant access to a few domains instead of all authenticated users from all domains. In that case just use DOMAIN\\domain users.\n\nshare|improve this answer\n\nYour Answer\n\n\u00a0\ndiscard\n\nBy posting your answer, you agree to the privacy policy and terms of service.\n\nNot the answer you're looking for? Browse other questions tagged or ask your own question."]}