A built-in group on Microsoft Windows NT and Windows 2000 networks. The Domain Users group simplifies administration of users on the network.
It is a global group and does not have any preassigned system rights. Its initial membership is empty until ordinary network users are created for the domain.
User accounts that are added to this group gain the rights and privileges that are assigned to ordinary users in the network, such as the right to log on over the network. All ordinary users on the network should be members of this group.
On Windows 2000–based networks, the Domain Users group is created by default in the Users organizational unit (OU) within Active Directory.