MCITP 70-640: Default Local Groups

Default local groups exist locally on a Windows computer and available only on that computer. This video looks at the local groups that are created by default on every Windows 7 and Windows Server 2008 operating system.

Demonstration 10:17

Administrators 1:30
Users 2:10
Power Users 3:26
Guests 4:43
Backup Operators 5:32
Remote Desktop Users 5:53
Offer Remote Assistance Helpers 6:24
Network Configuration Operators 7:05
Performance Monitor Users 7:28
Performance Log Users 7:56
IIS_IUSRS 8:08
Replicator 8:45
Distributed COM Users 9:17
Cartographic Operators 09:39

Administrators
Any user added to this group has full control over that computer. By default, the administrator will have access to everything, for example all files and folders. If an administrator has been denied access they can take ownership of the object in question and give themselves permissions to the object.

Users
This group is designed for the general user. It allows them to run software and change settings that relate to them.

Power Users
The power users group was introduced in Windows XP to give the user more access than the user group but less than an administrator. In Windows Vista this group was removed and in Windows 7 it was added again. In Windows 7, the Power Users group does not provide any access other than user access and is included only for legacy reasons. If you want to give this group the same permissions as Windows XP, you can apply a security template as explained below. This security template should only be applied as a last resort. The process is not reversible and may not function as expected with newer software.

To apply the security template to the Power Users Group
1. Open mmc and add the snap-in Configuration and Security Analysis
2. Right click Security Configuration and Analysis and select open database
3. Enter a new database name or open an existing database
5. Right click Security Configuration and Analysis and select configure computer now

Guests
The guest group gives the user the ability to login and run software. Any changes that are made by that user, for example changing the wallpaper, will be lost when the user logs off. The guest account is usually used for computers that are set up as kiosks. In this case, you want the user to have access to run software and make changes if they need to, but when the next user uses the computer, you want to ensure that the new user gets the default settings and not the modified settings.

Description to long for YouTube

References

[BijouBakson]

Such a thorough course content. Still valid as if it was released yesterday and I am using Windows 10 /1809 and Server 2019 Datacenter on Azure Portal - So this is gold. Thank you very much.

[SoloSo]

You called this informative?!!! Yes I do! Absolutely one of the best channels on YouTube. The videos are well paced, well narrated, easy to understand and simply put "spot on"! Kudos to you sir and continued success!

[itfreetraining]

No problem at all. Glad we could help.

[itfreetraining]

Adding a user to the backup operators group will allow them to access data on the computer to backup data. It is more a group designed to allow local backup software to access the computer. For this reason when you add the user to the local backup operators group they may be able to access the computer and you may need to add them to additional access group depending on how you access the computer.

[itfreetraining]

No. If you have software that does not require additional rights it can be installed as a user, but any software that makes changes to the registry or the program files is going to need more rights which is most software. If you worried about giving them domain administrator right, use group policy computer configuration->Windows Settings->Security Settings->Restricted Groups at the domain to give them local admin rights on all your p.c rather than giving them domain administrator rights.

[itfreetraining]

You would need to enable anonymous access. On a client machine like Windows 7 there is an option in to allow guest access. On Windows Server you need to make a change in the registry listing the shares that you want to enable anonymous access on.

[ramziboutaoua]

thank you sir, never found a personne as good in explanation as you are, ,,the best ::!!!

[SWISS-]

Still valid for MD-100 thank you. I just failed (like 690...) due to tons of questions on this and other subjects not deeply covered byCBT nuggets. They just brushed over them, only going into detail on the two most obvious. Administor, full access, and guest, basically no access other than network shares that allow access to the Everyone group. They spent 3 minutes on each, and then 1 minute discussing every other group...

[manologuia]

One of the best videos I watched about this topic ... Jesus bless you #Egypt

[msmit]

Thanks, i'm gonna give it a try. Keep up the good work

[msmit]

I want to give members of the IT group permissions to install programs, but I don't want to make them administrators. Is there a group that has this permission?

[manologuia]

When I made a guest account it dose not delete itself on logging off as you said in the video... once I go back all the setting are intact and never be deleted .... this happen on windows machine not joined to AD ??? any ideas ???

[dilshadbegum]

👍 Thank you sir ev good Expelaiment I understand

[raghuveer]

Thanks a lot guys your videos are helping a lot and one request is if u can upload some more videos on MCSE 70-412  papers this will help me alot