Groups

name type description account operators security group - domain local members can administer domain user and group accounts administrators security group - domain local administrators have complete and unrestricted access to the computer/domain advance search security group - global backup operators security group - domain local backup operators can override security restrictions for the sole purpose of backing up or restoring files cert publishers security group - domain local members of this group are permitted to publish certificates to the active directory cheque_dishonor_ddp security group - global cheque_dishonor_issuance security group - global cheque_dishonor_wd security group - global collection_issuance security group - global collection_refund security group - global collection_withdraw security group - global content engine servers security group - global filenet p8 services server group account data_entry security group - global data_entry_qc security group - global data_entry_supervisor security group - global despatch security group - global distributed com users security group - domain local members are allowed to launch, activate and use distributed com objects on this machine. dnsadmins security group - domain local dns administrators group dnsupdateproxy security group - global dns clients who are permitted to perform dynamic updates on behalf of some other clients (such as dhcp servers). document search security group - global domain admins security group - global designated administrators of the domain domain computers security group - global all workstations and servers joined to the domain domain controllers security group - global all domain controllers in the domain domain guests security group - global all domain guests domain users security group - global all domain users dummy_pda security group - global duplicate_pda security group - global enterprise admins security group - global designated administrators of the enterprise exception_de security group - global exception_general security group - global exception_issuance security group - global exception_uw security group - global fn_aeadministrators security group - global application engine administrators fn_ceadministrators security group - global content engine administrators fn_peadministrators security group - global process engine administrators group policy creator owners security group - global members in this group can modify group policy for the domain guests security group - domain local guests have the same access as members of the users group by default, except for the guest account which is further restricted helpservicesgroup security group - domain local group for the help and support center iis_wpg security group - domain local iis worker process group incoming forest trust builders security group - domain local members of this group can create incoming, one-way trusts to this forest issuance security group - global issuance_stp security group - global

manager_operations security group - global manager_underwriter security group - global manager_underwriting security group - global medical_existingclient security group - global medical_group security group - global medical_hni security group - global medical_mer security group - domain local medical_merall security group - global medical_ormreview security group - global medical_qc security group - global medical_special security group - global medical_underwriter security group - domain local money_ddp security group - global money_issuance security group - global money_refund security group - global network configuration operators security group - domain local members in this group can have some administrative privileges to manage configuration of networking features nonmedical_existingclient security group - domain local nonmedical_group security group - domain local nonmedical_hni security group - domain local nonmedical_normal security group - domain local nonmedical_ormreview security group - global nonmedical_qc security group - domain local nonmedical_sj security group - domain local nonmedical_special security group - global orm_ru_pending security group - domain local performance log users security group - domain local members of this group have remote access to schedule logging of performance counters on this computer performance monitor users security group - domain local members of this group have remote access to monitor this computer post_issue_qc security group - global pre_issue_qc security group - global pre-windows 2000 compatible access security group - domain local a backward compatibility group which allows read access on all users and groups in the domain print operators security group - domain local members can administer domain printers q_de_la security group - global q_stp security group - global q_uw_med_ceo security group - global q_uw_med_director security group - global q_uw_med_existingclient_club security group - global q_uw_med_gold security group - global q_uw_nonmed_ceo security group - global q_uw_nonmed_director security group - global q_uw_nonmed_existingclient_club security group - global q_uw_nonmed_gold security group - global ras and ias servers security group - domain local servers in this group can access remote access properties of users re_scan security group - global refund_ddp security group - global refund_withdraw security group - global remote desktop users security group - domain local members in this group are granted the right to logon remotely replicator security group - domain local supports file replication in a domain scanapps security group - global scanning application group scanappusers security group - global schema admins security group - global designated administrators of the schema

server operators security group - domain local members can administer domain servers simple search security group - global supervisor_underwriter security group - global telnetclients security group - domain local members of this group have access to telnet server on this system. terminal server license servers security group - domain local terminal server license servers trial group security group - domain local users security group - domain local users are prevented from making accidental or intentional system-wide changes. thus, users can run certified applications, but not most legacy applications uw_am security group - global uw_cmo security group - global uw_exec_med security group - global uw_exec_non_med security group - global uw_head security group - global uw_manager security group - global uw_reinsurance security group - global uw_supp security group - global uw_support_inward security group - global uw_support_outward security group - global uw_tl_med security group - global uw_tl_non_med security group - global windows authorization access group security group - domain local members of this group have access to the computed tokengroupsglobalanduniversal attribute on user objects wins users security group - domain local members who have view-only access to the wins server workflow_tracker security group - global