Built-in Local Group

Definition of Built/in Local Group in Network Encyclopedia.

What is Built-in Local Group (networking)?

Built-in Local Group is a Microsoft Windows local group created during installation that has preassigned rights and permissions.

Built-in local groups are used to simplify the administrative task of assigning users and groups rights to perform system tasks and permissions to access network resources. There are nine different built-in local groups on computers running Windows NT:

  • Users: Contains the Domain Users global group and is used to assign rights and permissions to all ordinary users. 
  • Administrators: Contains the Domain Admins global group and the Administrator account created during setup. 
  • Guests: Contains the Domain Guests global group. 
  • Power Users: Members have the right to share folders and printers. 
  • Replicator: This group is used exclusively by the Directory Replicator Service. 
  • Backup Operators: Members have the right to back up and restore servers. 
  • Account Operators: Members have the right to administer accounts. 
  • Server Operators: Members have the right to administer servers. 
  • Print Operators: Members have the right to administer printers. 

The following table shows which of these groups exist within the domain directory database on Windows NT domain controllers and which exist within the local directory database on Windows NT member servers and workstations:

Built-In Local Groups of Windows NT

Built-In Local GroupWindows NT Domain ControllerWindows NT Member ServerWindows NT Workstation
Power UsersNYY
Backup OperatorsYYY
Account OperatorsYNN
Server OperatorsYNN
Print OperatorsYNN

Built-in Local Groups in Windows 2000 networks

On Windows 2000 networks, there are only six built-in local groups, and these exist only on member servers or workstations. The six built-in local groups for Windows 2000 are Users, Administrators, Guests, Power Users, Replicator, and Backup Operators.

Windows 2000 also has built-in groups called «built-in domain local groups». These groups are designed to provide users with permissions and rights on domain controllers and Active Directory. The seven built-in domain local groups in Windows 2000 are Users, Administrators, Guests, Backup Operators, Account Operators, Server Operators, and Print Operators.


Articles posted after being checked by editors.

Recent Content

link to Public Key Infrastructure (PKI)

Public Key Infrastructure (PKI)

Public Key Infrastructure, also known as PKI, is a set of services that support the use of public-key cryptography in a corporate or public setting. A public key infrastructure (PKI) enables key pairs to be generated, securely stored, and securely transmitted to users so that users can send encrypted transmissions and digital signatures over distrusted public networks such as the Internet.
link to Digital Signature

Digital Signature

Digital Signature is an electronic signature that you can use to sign a document being transmitted by electronic means such as e-mail. Digital signatures validate the identity of the sender and ensure that the document they are attached to has not been altered by unauthorized parties during the transmission.