What are local groups for?


lars-schlageter-autor
Hello, this is Lars. IT Engineer. Certified (and enthusiastic) webmaster. Also an enthusiastic Windows, Apple, and Office user. I write about all kinds of topics around IT. Living in Switzerland. You can find out more about me here: About me. Thanks for your visit!

The following is taken from

http://technet.microsoft.com/en-us/library/cc785098(v=ws.10).aspx

You should have a clear idea of what the main groups are made for. I. E. if
you want a user to backup your server, just put him in the backup operator
group.

GroupDescription
AdministratorsMembers of this group have full control. Rest should be clear 😉
Backup OperatorsMembers of this group can back up and restore files on the server, regardless of any permissions that protect those files. They cannot change security settings.
DHCP Administrators (installed with the DHCP Server service)Members of this group have administrative access to the Dynamic Host Configuration Protocol (DHCP) Server service. This group provides a way to assign limited administrative access to the DHCP server only, while not providing full access to the server. Members of this group can administer DHCP on a server using the DHCP console or the Netsh command, but are not able to perform other administrative actions on the server.
DHCP Users (installed with the DHCP Server service)Members of this group have read-only access to the DHCP Server service. This allows members to view information and properties stored at a specified DHCP server.
GuestsIn a computer joined to the domain, members of this group have a temporary profile created at log on, and when the member logs off, the profile is deleted.
HelpServicesGroupThis group allows administrators to set rights common to all support applications.
Network Configuration OperatorsMembers of this group can make changes to TCP/IP settings and renew and release TCP/IP addresses. This group has no default members.
Performance Monitor UsersMembers of this group can monitor performance counters on the server locally and from remote clients without being a member of the Administrators or Performance Log Users groups.
Performance Log UsersMembers of this group can manage performance counters, logs and alerts on the server locally and from remote clients without being a member of the Administrators group.
Power UsersMembers of this group can create user accounts and then modify and delete the accounts they have created. They can create local groups and then add or remove users from the local groups they have created.
Print OperatorsMembers of this group can manage printers and print queues.
Remote Desktop UsersMembers of this group can remotely log on to a server.
ReplicatorThe Replicator group supports replication functions. The only member of the Replicator group should be a domain user account used to log on the Replicator services of a domain controller. Do not add user accounts of actual users to this group.
Terminal Server UsersThis group contains any users who are currently logged on to the system using Terminal Server.
UsersMembers of this group can perform common tasks, such as running applications, using local and network printers, and locking the server. Users cannot share directories or create local printers. Any user account created in the domain becomes a member of this group.
WINS Users (installed with WINS service)Members of this group are permitted read-only access to Windows Internet Name Service (WINS).
Did you like the article? Then I'm happy if you like and share it.
Thank you!

Leave a Reply

Your email address will not be published. Required fields are marked *