Global groups in Microsoft Windows NT that are created during installation to organize common groups of users for administrative purposes. These built-in global groups are created within the Security Accounts Manager (SAM) database of the primary domain controller (PDC). Three built-in global groups exist:
Windows 2000 includes a fourth type of built-in global group called Enterprise Admins, which contains users who are assigned administrative rights over the entire network. The Enterprise Admins global group should be added to the Administrators domain local group in each domain of your network. By default, the Administrator account is a member of the Enterprise Admins group.