🟢Domain Groups

Domain Group NameDescription

Domain Admins

Members of this group have full administrative control over the domain and all objects within it.

Domain Users

Members of this group include all user accounts in the domain. They have basic access and permissions by default.

Domain Guests

Members of this group have limited access to the domain and are restricted from performing certain actions.

Domain Computers

Members of this group include all computer accounts in the domain.

Enterprise Admins

Members of this group have administrative control over all domains in the forest.

Schema Admins

Members of this group have administrative control over the Active Directory schema.

Domain Controllers

Members of this group include all domain controllers in the domain.

Cert Publishers

Members of this group can publish certificates in the Active Directory.

DNSAdmins

Members of this group have administrative control over DNS zones and records in the domain.

Group Policy Creator Owners

Members of this group can create Group Policy Objects (GPOs) in the domain.

Account Operators

Members of this group have limited administrative permissions to manage user accounts and groups.

Last updated