Authenticated users have read/execute rights to the sysvol folder. I even put domain users on there as well seeing if that would allow them access to it