In Win 10 there a number of 'User Groups' (Found under Properties > Security > Advanced). Do any of these groups allow network access to the PC by default? That is to say: By having certain groups permitted to use/access certain folders, the folder is therefore opened up to network (remote) access? If so, how can I easily identify which groups grant network access? How can I easily ensure that ALL files/folders on the PC are configured in such a way that remote access cannot view or manipulate them in any way? I'm still baffled by Microsoft's Users/Groups/Built-In Security Principle implementation. That's after having read plenty of tech-sheets on the subject from MS themselves.
