does authenticated users allow all domain users access?
Authenticated User Permissions Are Removed. In a locked-down Active Directory Domain Services (AD DS) environment, authenticated user access control entries (ACEs) are removed from the default Active Directory containers, including the Users, Configuration or System, and organizational units (OUs) where User and Computer objects are stored.