Friday, 29 March 2013

Default Local Groups

Windows 2008 and Windows 7 Default Local Groups

Did you know:

  • The Power Users group has no default rights, is present for backward compatibility and has no more rights than the Users group. A security template must be applied to enact its legacy role.
  • Members of the Users group cannot share folders or create local printers.

While user rights can be configured through Group Policy it is still easier and more transparent to apply through security groups.

Administrators Unrestricted access
Backup Operators Override file and folder access to backup and restore data.
Cryptographic Operators Windows need to be deployed in Common Criteria Mode
Distributed COM Users Manipulate Distributed COM objects
Event Log Readers Read event logs
Network Configuration Operators Change TCP/IP settings
Performance Log Users Schedule logging of performance counters, enable and collect event traces
Performance Monitor Users Access performance counter data locally and remotely
Power Users Legacy use only
Remote Desktop Users Use remote desktop
Replicator Support file replication in domain

For a fuller understanding of the Default Local Groups visit the TechNet link it is Windows Server 2008 but relates to Windows 7

Default local groups

No comments:

Post a Comment