built-in local group

Built-in Local Group is a Microsoft Windows local group created during installation that has preassigned rights and permissions.

What is Built-in Local Group (in computer networking)?

A Microsoft Windows NT local group created during installation that has preassigned rights and permissions. Built-in local groups are used to simplify the administrative task of assigning users and groups rights to perform system tasks and permissions to access network resources. There are nine different built-in local groups on computers running Windows NT:

  • Users:
    Contains the Domain Users global group and is used to assign rights and permissions to all ordinary users.

     

  • Administrators:
    Contains the Domain Admins global group and the Administrator account created during setup.

     

  • Guests:
    Contains the Domain Guests global group.

     

  • Power Users:
    Members have the right to share folders and printers.

     

  • Replicator:
    This group is used exclusively by the Directory Replicator Service.

     

  • Backup Operators:
    Members have the right to back up and restore servers.

     

  • Account Operators:
    Members have the right to administer accounts.

     

  • Server Operators:
    Members have the right to administer servers.

     

  • Print Operators:
    Members have the right to administer printers.

     

The following table shows which of these groups exist within the domain directory database on Windows NT domain controllers and which exist within the local directory database on Windows NT member servers and workstations:

Built-In Local Groups of Windows NT

Built-In Local Group Windows NT Domain Controller Windows NT Member Server Windows NT Workstation
Users
Y
Y
Y
Administrators
Y
Y
Y
Guests
Y
Y
Y
Power Users
N
Y
Y
Replicator
Y
Y
Y
Backup Operators
Y
Y
Y
Account Operators
Y
N
N
Server Operators
Y
N
N
Print Operators
Y
N
N
NOTE

On Windows 2000 networks, there are only six built-in local groups, and these exist only on member servers or workstations. The six built-in local groups for Windows 2000 are Users, Administrators, Guests, Power Users, Replicator, and Backup Operators.

Windows 2000 also has built-in groups called Ā«built-in domain local groupsĀ». These groups are designed to provide users with permissions and rights on domain controllers and Active Directory. The seven built-in domain local groups in Windows 2000 are Users, Administrators, Guests, Backup Operators, Account Operators, Server Operators, and Print Operators.