Built-in Local Group

Last Edited

by

in

Definition of Built/in Local Group in Network Encyclopedia.

What is Built-in Local Group (networking)?

Built-in Local Group is a Microsoft Windows local group created during installation that has preassigned rights and permissions.

Built-in local groups are used to simplify the administrative task of assigning users and groups rights to perform system tasks and permissions to access network resources. There are nine different built-in local groups on computers running Windows NT:

  • Users: Contains the Domain Users global group and is used to assign rights and permissions to all ordinary users. 
  • Administrators: Contains the Domain Admins global group and the Administrator account created during setup. 
  • Guests: Contains the Domain Guests global group. 
  • Power Users: Members have the right to share folders and printers. 
  • Replicator: This group is used exclusively by the Directory Replicator Service. 
  • Backup Operators: Members have the right to back up and restore servers. 
  • Account Operators: Members have the right to administer accounts. 
  • Server Operators: Members have the right to administer servers. 
  • Print Operators: Members have the right to administer printers. 

The following table shows which of these groups exist within the domain directory database on Windows NT domain controllers and which exist within the local directory database on Windows NT member servers and workstations:

Built-In Local Groups of Windows NT

Built-In Local GroupWindows NT Domain ControllerWindows NT Member ServerWindows NT Workstation
UsersYYY
AdministratorsYYY
GuestsYYY
Power UsersNYY
ReplicatorYYY
Backup OperatorsYYY
Account OperatorsYNN
Server OperatorsYNN
Print OperatorsYNN

Built-in Local Groups in Windows 2000 networks

On Windows 2000 networks, there are only six built-in local groups, and these exist only on member servers or workstations. The six built-in local groups for Windows 2000 are Users, Administrators, Guests, Power Users, Replicator, and Backup Operators.

Windows 2000 also has built-in groups called «built-in domain local groups». These groups are designed to provide users with permissions and rights on domain controllers and Active Directory. The seven built-in domain local groups in Windows 2000 are Users, Administrators, Guests, Backup Operators, Account Operators, Server Operators, and Print Operators.

Search