Built-in Local Group

Definition of Built/in Local Group in Network Encyclopedia.

What is Built-in Local Group (networking)?

Built-in Local Group is a Microsoft Windows local group created during installation that has preassigned rights and permissions.

Built-in local groups are used to simplify the administrative task of assigning users and groups rights to perform system tasks and permissions to access network resources. There are nine different built-in local groups on computers running Windows NT:

  • Users: Contains the Domain Users global group and is used to assign rights and permissions to all ordinary users. 
  • Administrators: Contains the Domain Admins global group and the Administrator account created during setup. 
  • Guests: Contains the Domain Guests global group. 
  • Power Users: Members have the right to share folders and printers. 
  • Replicator: This group is used exclusively by the Directory Replicator Service. 
  • Backup Operators: Members have the right to back up and restore servers. 
  • Account Operators: Members have the right to administer accounts. 
  • Server Operators: Members have the right to administer servers. 
  • Print Operators: Members have the right to administer printers. 

The following table shows which of these groups exist within the domain directory database on Windows NT domain controllers and which exist within the local directory database on Windows NT member servers and workstations:

Built-In Local Groups of Windows NT

Built-In Local GroupWindows NT Domain ControllerWindows NT Member ServerWindows NT Workstation
Power UsersNYY
Backup OperatorsYYY
Account OperatorsYNN
Server OperatorsYNN
Print OperatorsYNN

Built-in Local Groups in Windows 2000 networks

On Windows 2000 networks, there are only six built-in local groups, and these exist only on member servers or workstations. The six built-in local groups for Windows 2000 are Users, Administrators, Guests, Power Users, Replicator, and Backup Operators.

Windows 2000 also has built-in groups called «built-in domain local groups». These groups are designed to provide users with permissions and rights on domain controllers and Active Directory. The seven built-in domain local groups in Windows 2000 are Users, Administrators, Guests, Backup Operators, Account Operators, Server Operators, and Print Operators.


Articles posted after being checked by editors.

Recent Posts

link to Root


Root is the base of a hierarchical file system. It can also be the UNIX superuser or the CERN Data Analysis Framework, and more. Just read the article.