the Domain Users group : can be used on domain controllers.
For resources on non-domain controllers, you will need to use the Authenticated Users group.
But it is still recommend the use of Authenticated Users for all resource sharing that is open to all authenticate users of your environment.
Another Difference:
Domain Users groupThe group only exists when you have a Domain Controller, and by extension it is hosted there, but you can use it on any member computer (workstation or server). It is the most secure option because (1) its membership is controlled by Administrators and not calculated and (2) because it is a Global Group will only contain users from the local domain.
Authenticated Users : includes all user and computer accounts from the local domain and any trusted domains.
المفضلات