Local groups in windows

Awesome PC Accessories. Best Linux Laptops. Best Wireless iPhone Earbuds. Best Bluetooth Trackers. Best eReaders. Best VPN. Browse All News Articles. Windows 11 Uninstall Clock. Teams Walkie-Talkie. PCI Express 6. Wordle Scams. T-Mobile iCloud Private Relay. Avira Antivirus Crypto Miner. Linux PinePhone Pro. For more information about adding members to local groups, see Add a member to a local group. The following table provides descriptions of the default groups located in the Groups folder and lists the assigned user rights for each group.

These rights are assigned within the local security policy. For complete descriptions of the user rights listed in the table, see User Rights Assignment.

For information about editing these rights, see Assign user rights for your local computer. Members of this group have full control of the server and can assign user rights and access control permissions to users as necessary. The Administrator account is also a default member. When this server is joined to a domain, the Domain Admins group is automatically added to this group.

Because this group has full control of the server, add users with caution. For more information, see Default local groups and Default groups. Access this computer from the network; Adjust memory quotas for a process; Allow log on locally; Allow log on through Terminal Services; Back up files and directories; Bypass traverse checking; Change the system time; Create a pagefile; Debug programs; Force shutdown from a remote system; Increase scheduling priority; Load and unload device drivers; Manage auditing and security log; Modify firmware environment variables; Perform volume maintenance tasks; Profile single process; Profile system performance; Remove computer from docking station; Restore files and directories; Shut down the system; Take ownership of files or other objects.

Members of this group can back up and restore files on the server, regardless of any permissions that protect those files. This is because the right to perform a backup takes precedence over all file permissions.

They cannot change security settings. Access this computer from the network; Allow log on locally; Back up files and directories; Bypass traverse checking; Restore files and directories; Shut down the system.

This group provides a way to assign limited administrative access to the DHCP server only, while not providing full access to the server.

Members of this group can administer DHCP on a server using the DHCP console or the Netsh command, but are not able to perform other administrative actions on the server. This allows members to view information and properties stored at a specified DHCP server. This information is useful to support staff when they need to obtain DHCP status reports. Members of this group will have a temporary profile created at log on, and when the member logs off, the profile will be deleted.

The Guest account which is disabled by default is also a default member of this group. This group allows administrators to set rights common to all support applications. By default, the only group member is the account associated with Microsoft support applications, such as Remote Assistance.

Invalid group names or SIDs will be skipped. Valid parts of the policy will apply, and error will be returned at the end of the processing. Similarly, invalid member names will be skipped, and error will be returned at the end to notify that not all settings were applied successfully. After a policy is applied on the client device, you can investigate the event log to review the result:.

The lsp. This log file tracks the SID-Name resolution. Skip to main content. This browser is no longer supported. Download Microsoft Edge More info. Used without parameters, net localgroup displays the name of the server and the names of local groups on the computer. Net localgroup is a command-line tool that is built into Windows Vista.

To run net localgroup , open a command prompt, type net localgroup with the appropriate parameters, and then press ENTER. The comment can contain up to characters. Enclose the text in quotation marks.