Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

For a server on a Windows Domain, what is the membership of "BUILTIN\Users" exactly?

(I figure this has an obvious answer, but googling hasn't given me any clear definitions)

share|improve this question
If you could expand your question a bit, what exactly are you not clear about? – jscott Apr 4 '12 at 15:29
@jscott - I just couldn't find a definition for it! But your answer is ideal, thanks. – codeulike Apr 4 '12 at 15:44
up vote 6 down vote accepted

From Microsoft KB 243330 Well-known security identifiers in Windows operating systems

SID: S-1-5-32-545

Name: Users

Description: A built-in group. After the initial installation of the operating system, the only member is the Authenticated Users group. When a computer joins a domain, the Domain Users group is added to the Users group on the computer.

When you install a Windows Server, the only member of the local Users group is local group Authenticated Users. Upon joining the server to your domain, the domain group EXAMPLE\Domain Users would be added to Users.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.