The list is organized as following:
First there is the list of local users. The list contains at least 4 users:
Name | Description |
Account Operators | A built-in group that exists only on domain controllers. By default, the group has no members. By default, Account Operators have permission to create, modify, and delete accounts for users, groups, and computers in all containers and organizational units of Active Directory except the built-in container and the Domain Controllers OU. Account Operators do not have permission to modify the Administrators and Domain Admins groups, nor do they have permission to modify the accounts for members of those groups. |
Administrators | A built-in group. After the initial installation of the operating system, the only member of the group is the Administrator account. When a computer joins a domain, the Domain Admins group is added to the Administrators group. When a server becomes a domain controller, the Enterprise Admins group also is added to the Administrators group. |
Anonymous | A group of users that includes all users that have logged on anonymously. |
Authenticated Users | A group that includes all users whose identities were authenticated when they logged on. |
Backup Operators | A built-in group. By default, the group has no members. Backup Operators can back up and restore all files on a computer, regardless of the permissions that protect those files. Backup Operators also can log on to the computer and shut it down. |
Batch | Group that includes all users that have logged on through a batch queue facility. |
Dialup | A group that includes all users who have logged on through a dial-up connection. |
Guests | A built-in group. By default, the only member is the Guest account. The Guests group allows occasional or one-time users to log on with limited privileges to a computer's built-in Guest account. |
Incoming Forest Trust Builders | An alias. Members of this group can create incoming, one-way trusts to this forest. |
Network | A group that includes all users that have logged on through a network connection. |
Network Configuration Operators | An alias. Members in this group can have some administrative privileges to manage configuration of networking features. |
Performance Logon Users | An alias. Members of this group have remote access to schedule logging of performance counters on this computer. |
Performance Monitor Users | Alias. Members of this group have remote access to monitor this computer. |
Power Users | A built-in group. By default, the group has no members. Power users can create local users and groups; modify and delete accounts that they have created; and remove users from the Power Users, Users, and Guests groups. Power users also can install programs; create, manage, and delete local printers; and create and delete file shares. |
Pre-Windows 2000 Compatible Access | An alias added by Windows 2000. A backward compatibility group which allows read access on all users and groups in the domain. |
Print Operators | A built-in group that exists only on domain controllers. By default, the only member is the Domain Users group. Print Operators can manage printers and document queues. |
Remote Desktop Users | An alias. Members in this group are granted the right to logon remotely. |
Replicators | A built-in group that is used by the File Replication service. |
Server Operators | A built-in group that exists only on domain controllers. By default, the group has no members. Server Operators can log on to a server interactively; create and delete network shares; start and stop services; back up and restore files; format the hard disk of the computer; and shut down the computer. |
Service | A group that includes all security principals that have logged on as a service. |
Terminal License Servers | An alias. A group for Terminal Server License Servers. |
Users | A built-in group. After the initial installation of the operating system, the only member is the Authenticated Users group. When a computer joins a domain, the Domain Users group is added to the Users group on the computer. |
Windows Authorization Access Group | An alias. Members of this group have access to the computed tokenGroupsGlobalAndUniversal attribute on User objects. |
Beneath the users list ther are 7 buttons: