Tips: Windows Vista Security Groups

To be able to maintain different security permissions of users Windows Vista support a long-time feature called Security Groups. Each group has defined permission set which are automatically cascaded to its members.

Below are the security groups of Windows Vista:

Administrators – is the ultimate security group in Windows Vista which has the power to create user accounts, delete account, install software updates, change device settings and almost every aspect in managing Windows Vista from a user perspective.

Users – they have access to their own folders, files, password account, and are capable of running and installing programs sans administrative rights.

Backup Operators – have the power to access the backup program for back up and restore files and folders regardless of permissions.

Cryptographic Operators – ability to accomplish cryptographic tasks.

Distributed COM Users – ability for using Distributed COM.

Guests – access to their own files and folders but doesn’t have the option to change account password.

IIS_USRS – ability to work on remote Internet Information Server.

Network Configuration Operators – ability for installation and configuration of network features.

Performance Log Users – ability to use Windows Performance Diagnostic Console snap-in for monitoring performance counters, logs, and alerts, both locally and remotely.

Performance Monitor Users – ability to use the Windows Performance Diagnostic Console snap-in for monitoring performance counters only, both locally and remotely.

Power Users – have a some of the Administrator group privileges except the following: back up or restore files, replace system files, take ownership of files, or install or remove device drivers, install applications that explicitly require Administrators group membership.

Remote Desktop Users – ability to logon using Remote Desktop Connection.

Replicator – ability to replicate files across domains.