-17

What are the five groups that come built into Windows Server 2008 for administrating your server?

I think they're:

  • Administrator Group
  • Machines
  • Accounts

I'm kind of of lost here.

8
  • 4
    Because were not here to do your homework for you, that's your job. If you've got a specific problem that you can demonstrate you have tried to solve, we will gladly help you out, were only to happy to pass on our knowledge. Were not going to sit here and cater to your laziness because you can't be bother to do some research on the internet, or perhaps look on a 2008 server.
    – Sam Cogan
    Nov 3, 2009 at 13:14
  • 4
    "Who cares if it's homework"...evidently the people who actually know the answer care and they probably care if you make snotty comments to them instead of being nice about it and the fact you neglected to tag the question properly and show that you're too lazy to do your own homework assignments and instead try roping others into doing it for you...just a guess. Nov 3, 2009 at 15:04
  • 3
    If you're taking a sysadmin class, you should probably build a Win2k8 virtual machine. Then you can go look and get the answer easily enough.
    – Kyle Smith
    Nov 3, 2009 at 15:31
  • 3
    Alternatively, slide thru your sysadmin classes w/o actually learning anything. Then go out and get a job in the industry. I'll be there to clean up after you're let go, and profit! >smile< Nov 3, 2009 at 15:47
  • 3
    I think this should serve as a lesson in being decent to your peers. If you had followed up with a "woops" instead of a who cares you would have your answer now. Social skills matter.
    – MattyB
    Nov 4, 2009 at 15:22

1 Answer 1

16

Here is the list of well known security identifiers.

These following groups are present on the local computer and are typically used for administering your system.

  • SID: S-1-5-32-544 - Name: Administrators - Description: A built-in group. After the initial installation of the operating system, the only member of the group is the Administrator account. When a computer joins a domain, the Domain Admins group is added to the Administrators group. When a server becomes a domain controller, the Enterprise Admins group also is added to the Administrators group.
  • SID: S-1-5-32-548 - Name: Account Operators - Description: A built-in group that exists only on domain controllers. By default, the group has no members. By default, Account Operators have permission to create, modify, and delete accounts for users, groups, and computers in all containers and organizational units of Active Directory except the Builtin container and the Domain Controllers OU. Account Operators do not have permission to modify the Administrators and Domain Admins groups, nor do they have permission to modify the accounts for members of those groups.
  • SID: S-1-5-32-549 - Name: Server Operators - Description: A built-in group that exists only on domain controllers. By default, the group has no members. Server Operators can log on to a server interactively; create and delete network shares; start and stop services; back up and restore files; format the hard disk of the computer; and shut down the computer.
  • SID: S-1-5-32-550 - Name: Print Operators - Description: A built-in group that exists only on domain controllers. By default, the only member is the Domain Users group. Print Operators can manage printers and document queues.
  • SID: S-1-5-32-551 - Name: Backup Operators - Description: A built-in group. By default, the group has no members. Backup Operators can back up and restore all files on a computer, regardless of the permissions that protect those files. Backup Operators also can log on to the computer and shut it down.

In a domain environment these groups are present, and are used for administrative purposes.

  • SID: S-1-5-21domain-512 - Name: Domain Admins - Description: A global group whose members are authorized to administer the domain. By default, the Domain Admins group is a member of the Administrators group on all computers that have joined a domain, including the domain controllers. Domain Admins is the default owner of any object that is created by any member of the group.
  • SID: S-1-5-21root domain-518 - Name: Schema Admins - Description: A universal group in a native-mode domain; a global group in a mixed-mode domain. The group is authorized to make schema changes in Active Directory. By default, the only member of the group is the Administrator account for the forest root domain.
    • SID: S-1-5-21root domain-519 - Name: Enterprise Admins - Description: A universal group in a native-mode domain; a global group in a mixed-mode domain. The group is authorized to make forest-wide changes in Active Directory, such as adding child domains. By default, the only member of the group is the Administrator account for the forest root domain.
    • SID: S-1-5-21domain-520 - Name: Group Policy Creator Owners - Description: A global group that is authorized to create new Group Policy objects in Active Directory. By default, the only member of the group is Administrator.

Not the answer you're looking for? Browse other questions tagged .