It's always a good idea to have authenticated users in any GPO, but you can always refine it as needed. Just be careful with GPOs and test them carefully. it's a good idea to prefer creating GPOs using PowerShell scripts so the admin can keep them in case he needs to recreate them later.