Domain groups
CNSAM NameMember of groupsdescriptionCreated onChanged onSID
mspmsp  05/01/24 16:56:3505/01/24 16:56:493741
TestmspTestmsp  05/01/24 16:55:0605/01/24 16:55:213740
NullOneNullOne  10/19/23 20:57:5010/20/23 19:46:123210
Windows Hello for Business UsersWindows Hello for Business Users  05/11/23 15:33:2408/17/23 20:37:063167
Windows Hello for BusinessWindows Hello for Business  04/04/23 17:46:2304/04/23 17:46:233157
ServicioScannerServicioScanner  01/11/23 14:26:5911/13/23 13:20:303641
DRV ViewDRV View  12/20/22 19:26:4812/20/22 19:53:223147
DRV EditDRV Edit  12/20/22 19:26:4012/20/22 19:26:403146
EasyStore Edit GroupEasyStore Edit Group  06/26/22 21:37:0202/09/24 14:32:093107
EasyStore Access GroupEasyStore Access Group  06/26/22 21:36:4208/17/23 19:54:323106
VPN-RemoteUserVPN-RemoteUser  06/21/22 12:42:0707/12/24 19:07:213603
Enterprise Key AdminsEnterprise Key Admins Members of this group can perform administrative actions on key objects within the forest.06/14/22 05:42:5506/14/22 06:14:34527
Key AdminsKey Admins Members of this group can perform administrative actions on key objects within the domain.06/14/22 05:42:5506/14/22 06:14:34526
Storage Replica AdministratorsStorage Replica Administrators Members of this group have complete and unrestricted access to all features of Storage Replica.06/14/22 05:42:5506/14/22 05:42:55582
Protected UsersProtected Users Members of this group are afforded additional protections against authentication security threats. See http://go.microsoft.com/fwlink/?LinkId=298939 for more information.06/14/22 05:42:5506/14/22 05:42:55525
Remote Management UsersRemote Management Users Members of this group can access WMI resources over management protocols (such as WS-Management via the Windows Remote Management service). This applies only to WMI namespaces that grant access to the user.06/14/22 05:42:5506/14/22 05:42:55580
Access Control Assistance OperatorsAccess Control Assistance Operators Members of this group can remotely query authorization attributes and permissions for resources on this computer.06/14/22 05:42:5506/14/22 05:42:55579
Cloneable Domain ControllersCloneable Domain Controllers Members of this group that are domain controllers may be cloned.06/14/22 05:42:5506/14/22 05:42:55522
Hyper-V AdministratorsHyper-V Administrators Members of this group have complete and unrestricted access to all features of Hyper-V.06/14/22 05:42:5506/14/22 05:42:55578
RDS Management ServersRDS Management Servers Servers in this group can perform routine administrative actions on servers running Remote Desktop Services. This group needs to be populated on all servers in a Remote Desktop Services deployment. The servers running the RDS Central Management service must be included in this group.06/14/22 05:42:5506/14/22 05:42:55577
RDS Endpoint ServersRDS Endpoint Servers Servers in this group run virtual machines and host sessions where users RemoteApp programs and personal virtual desktops run. This group needs to be populated on servers running RD Connection Broker. RD Session Host servers and RD Virtualization Host servers used in the deployment need to be in this group.06/14/22 05:42:5506/14/22 05:42:55576
RDS Remote Access ServersRDS Remote Access Servers Servers in this group enable users of RemoteApp programs and personal virtual desktops access to these resources. In Internet-facing deployments, these servers are typically deployed in an edge network. This group needs to be populated on servers running RD Connection Broker. RD Gateway servers and RD Web Access servers used in the deployment need to be in this group.06/14/22 05:42:5506/14/22 05:42:55575
FortinetFortinet  01/18/22 19:55:5606/27/23 15:38:071566
EngineEngine  01/12/17 15:19:4911/10/23 21:21:271282
AccountingAccounting Therefore Access Group05/12/17 16:17:0503/19/24 14:07:461347
Therefore ScannersTherefore Scanners  08/31/17 19:19:0408/17/23 20:37:062113
SQLServer2005SQLBrowserUser$MISSJ002SQLServer2005SQLBrowserUser$MISSJ002 Members in the group have the required access and privileges to be assigned as the log on account for the associated instance of SQL Server Browser.11/15/17 15:16:5805/21/22 16:17:482118
SQLServerMSSQLServerADHelperUser$MISSJ002SQLServerMSSQLServerADHelperUser$MISSJ002 Members in the group have the required access and privileges to be assigned as the log on account for the associated instance of SQL Server Active Directory Helper in SQL Server 2008.11/15/17 15:15:2505/21/22 16:17:482117
WSUS AdministratorsWSUS Administrators WSUS Administrators can administer the Windows Server Update Services server.06/21/17 14:30:1305/21/22 16:17:482102
WSUS ReportersWSUS Reporters WSUS Administrators who can only run reports on the Windows Server Update Services server.06/21/17 14:30:1305/21/22 16:17:482101
DHCP AdministratorsDHCP Administrators Members who have administrative access to DHCP service05/08/17 13:23:1405/21/22 16:17:481343
DHCP UsersDHCP Users Members who have view-only access to the DHCP service05/08/17 13:23:1405/21/22 16:17:481342
DnsUpdateProxyDnsUpdateProxy DNS clients who are permitted to perform dynamic updates on behalf of some other clients (such as DHCP servers).12/09/16 13:17:3905/21/22 16:17:481102
DnsAdminsDnsAdmins DNS Administrators Group12/09/16 13:17:3905/21/22 16:17:481101
testtestDomain Users 07/05/18 18:10:4206/14/22 12:30:031374
Folder RedirectionFolder RedirectionDomain Users 12/16/16 16:08:0503/19/24 14:07:461244
Cert PublishersCert PublishersDenied RODC Password Replication GroupMembers of this group are permitted to publish certificates to the directory12/09/16 13:16:5106/21/22 12:29:52517
Certificate Service DCOM AccessCertificate Service DCOM Access Members of this group are allowed to connect to Certification Authorities in the enterprise12/09/16 13:11:5005/21/22 16:17:42574
Remote Desktop UsersRemote Desktop Users Members in this group are granted the right to logon remotely12/09/16 13:11:5005/21/22 16:17:42555
Schema AdminsSchema AdminsDenied RODC Password Replication GroupDesignated administrators of the schema12/09/16 13:16:5110/18/23 19:54:47518
AdministratorsAdministrators Administrators have complete and unrestricted access to the computer/domain12/09/16 13:11:5007/12/24 19:07:21544
Domain ControllersDomain ControllersDenied RODC Password Replication GroupAll domain controllers in the domain12/09/16 13:16:5105/21/22 16:17:42516
Enterprise AdminsEnterprise AdminsAdministrators, Denied RODC Password Replication GroupDesignated administrators of the enterprise12/09/16 13:16:5103/19/24 14:07:46519
Domain AdminsDomain Admins Designated administrator of the domain12/09/16 13:16:5107/12/24 19:07:21512
Group Policy Creator OwnersGroup Policy Creator OwnersDenied RODC Password Replication GroupMembers in this group can modify group policy for the domain12/09/16 13:16:5103/19/24 14:07:46520
Pre-Windows 2000 Compatible AccessPre-Windows 2000 Compatible Access A backward compatibility group which allows read access on all users and groups in the domain12/09/16 13:16:5108/24/23 18:17:28554
GuestsGuests Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted12/09/16 13:11:5005/21/22 16:17:42546
UsersUsers Users are prevented from making accidental or intentional system-wide changes and can run most applications12/09/16 13:11:5010/19/23 20:47:14545
Denied RODC Password Replication GroupDenied RODC Password Replication Group Members in this group cannot have their passwords replicated to any read-only domain controllers in the domain12/09/16 13:16:5210/20/23 18:58:25572
Backup OperatorsBackup Operators Backup Operators can override security restrictions for the sole purpose of backing up or restoring files12/09/16 13:11:5010/20/23 18:58:25551
Domain UsersDomain UsersUsersAll domain users12/09/16 13:16:5103/19/24 14:07:46513
Windows Authorization Access GroupWindows Authorization Access Group Members of this group have access to the computed tokenGroupsGlobalAndUniversal attribute on User objects12/09/16 13:16:5105/21/22 16:17:42560
IIS_IUSRSIIS_IUSRS Built-in group used by Internet Information Services.12/09/16 13:11:5005/21/22 16:17:42568
Read-only Domain ControllersRead-only Domain ControllersDenied RODC Password Replication GroupMembers of this group are Read-Only Domain Controllers in the domain12/09/16 13:16:5205/21/22 16:17:42521
ReplicatorReplicator Supports file replication in a domain12/09/16 13:11:5005/21/22 16:17:42552
Account OperatorsAccount Operators Members can administer domain user and group accounts12/09/16 13:16:5110/25/22 15:30:01548
Server OperatorsServer Operators Members can administer domain servers12/09/16 13:16:5105/21/22 16:17:42549
Print OperatorsPrint Operators Members can administer domain printers12/09/16 13:11:5005/21/22 16:17:42550
Enterprise Read-only Domain ControllersEnterprise Read-only Domain Controllers Members of this group are Read-Only Domain Controllers in the enterprise12/09/16 13:16:5210/20/23 19:49:33498
Allowed RODC Password Replication GroupAllowed RODC Password Replication Group Members in this group can have their passwords replicated to all read-only domain controllers in the domain12/09/16 13:16:5205/21/22 16:17:42571
Terminal Server License ServersTerminal Server License Servers Members of this group can update user accounts in Active Directory with information about license issuance, for the purpose of tracking and reporting TS Per User CAL usage12/09/16 13:16:5105/21/22 16:17:42561
Incoming Forest Trust BuildersIncoming Forest Trust Builders Members of this group can create incoming, one-way trusts to this forest12/09/16 13:16:5105/21/22 16:17:42557
RAS and IAS ServersRAS and IAS Servers Servers in this group can access remote access properties of users12/09/16 13:16:5105/21/22 16:17:42553
Domain GuestsDomain GuestsGuestsAll domain guests12/09/16 13:16:5105/21/22 16:17:42514
Domain ComputersDomain Computers All workstations and servers joined to the domain12/09/16 13:16:5001/03/24 12:44:42515
Event Log ReadersEvent Log Readers Members of this group can read event logs from local machine12/09/16 13:11:5005/21/22 16:17:42573
Cryptographic OperatorsCryptographic Operators Members are authorized to perform cryptographic operations.12/09/16 13:11:5005/21/22 16:17:42569
Distributed COM UsersDistributed COM Users Members are allowed to launch, activate and use Distributed COM objects on this machine.12/09/16 13:11:5005/21/22 16:17:42562
Performance Log UsersPerformance Log Users Members of this group may schedule logging of performance counters, enable trace providers, and collect event traces both locally and via remote access to this computer12/09/16 13:11:5005/21/22 16:17:42559
Performance Monitor UsersPerformance Monitor Users Members of this group can access performance counter data locally and remotely12/09/16 13:11:5005/21/22 16:17:42558
Network Configuration OperatorsNetwork Configuration Operators Members in this group can have some administrative privileges to manage configuration of networking features12/09/16 13:11:5005/21/22 16:17:42556