I'm seeing some weird behaviour with a few of my ACEs at the minute, particularly when denying the
Authenticated Users instead of the usual
Domain\Domain Users. As a consequence of this, I can only fix my problem by allowing the
SYSTEM group at a lower level.
It seems Authenticated Users is blocking something that my application needs within SYSTEM.
Where do Authenticated Users and SYSTEM overlap?