I'm seeing some weird behaviour with a few of my ACEs at the minute, particularly when denying the Authenticated Users instead of the usual Domain\Domain Users. As a consequence of this, I can only fix my problem by allowing the SYSTEM group at a lower level.
It seems Authenticated Users is blocking something that my application needs within SYSTEM.
Where do Authenticated Users and SYSTEM overlap?
