built-in global group

Built-in Global Group is a global group that is created during installation to organize common groups of users for administrative purposes.

What is Built-in Global Group (in computer networking)?

Global groups in Microsoft Windows NT that are created during installation to organize common groups of users for administrative purposes. These built-in global groups are created within the Security Accounts Manager (SAM) database of the primary domain controller (PDC). Three built-in global groups exist:

  • Domain Admins:
    Initially, this group contains only the Administrator account that was created during setup. Only people with administrative responsibilities should be assigned to this group.

     

  • Domain Guests:
    This group contains the Guest account and is designed for organizing temporary users of network resources and granting them access.

     

  • Domain Users:
    When a new user account is created, it is automatically added to this group. The function of this group is to collect all ordinary users for the purpose of assigning them permissions to resources on the network.

     

NOTE

Windows 2000 includes a fourth type of built-in global group called Enterprise Admins, which contains users who are assigned administrative rights over the entire network. The Enterprise Admins global group should be added to the Administrators domain local group in each domain of your network. By default, the Administrator account is a member of the Enterprise Admins group.