Default domain groups.pdf

(2176 KB) Pobierz
743444527 UNPDF
13.12.2011
Default groups
Defal gop
Updaed: Jana 21, 2005
Applie To: Windo See 2003, Windo See 2003 R2, Windo See 2003 ih SP1,
Windo See 2003 ih SP2
Defal gop
Defal gop, ch a he Domain Admin gop, ae eci gop ha ae ceaed
aomaicall hen o ceae an Acie Dieco domain. Yo can e hee pedefined gop o
help conol acce o haed eoce and delegae pecific domain-ide adminiaie ole. Fo
infomaion abo defal gop oed on lcal compe, ee Defal local gop 1 .
Man defal gop ae aomaicall aigned a e of e igh ha ahoie membe of he
gop o pefom pecific acion in a domain, ch a logging on o a local em o backing p
file and folde. Fo eample, a membe of he Backp Opeao gop ha he igh o pefom
backp opeaion fo all domain conolle in he domain.
When o add a e o a gop, he e eceie all he e igh aigned o he gop and all
he pemiion aigned o he gop on an haed eoce. Fo moe infomaion abo e
igh and pemiion, ee Gop pe 2 .
Yo can manage gop b ing he Acie Dieco Ue and Compe nap-in in Micoof
Managemen Conole (MMC). Defal gop ae locaed in he Builtin conaine and he Users
conaine.
The Builtin conaine defal gop conain gop ha ae defined ih domain local cope. Yo
can moe gop in and o of hi conaine, b o canno moe he defal gop in hi
conaine o anohe locaion o o anohe domain.
The Users conaine defal gop conain gop ha ae defined ih global cope and gop
ha ae defined ih domain local cope. Yo can add he gop in hi conaine o ohe gop
and o can moe he defal gop in hi conaine o ohe oganiaional ni (OU) o
conaine, b o canno moe he gop o anohe domain.
A a eci be pacice, i i ecommended ha membe of defal gop ih boad
adminiaie acce e he Run as command o pefom adminiaie ak. Fo moe
infomaion, ee Uing Rn a 3 . Fo infomaion abo eci be pacice, ee Acie Dieco
Be pacice 4 . Fo infomaion abo addiional eci meae ha can be ed o poec
Acie Dieco, ee Secing Acie Dieco 5 .
Note
To lean ha gop o need o be a membe of o pefom a paicla pocede, man
pocedal opic nde Ho To in Help and Sppo Cene poide a noe ha idenifie hi
infomaion.
Gop in he Bilin conaine
The folloing able poide decipion of he defal gop locaed in he Bilin conaine and
li he aigned e igh fo each gop. Fo complee decipion of he e igh lied in
he able, ee Ue Righ Aignmen 6 . Fo infomaion abo ediing hee igh, ee Edi eci
eing on a Gop Polic objec 7 .
technet.microsoft.com/en-us/librar/cc756898(WS.10,printer).asp
1/7
743444527.008.png 743444527.009.png
13.12.2011
Default groups
Gop Decipion
Defal e igh
A
O
M ,
, ,
,
U C
,
D C
. M
A D A
,
. M
. B
, .
A ; S .
A
M
.
B , D A
E A
A . T
A
. B
,
.
A ;
A ; B
; B
; C ; C
; D ; E
; F
; I
; L ;
A ; M
; M
; P ; P
; R
; R
; S ; T
.
B
O
M
,
.
B O
.
T .
B
,
.
B ; A
; R ; S
.
G
B , D G
. T G
( )
.
N .
M -
,
technet.microsoft.com/en-us/librar/cc756898(WS.10,printer).asp
2/7
743444527.010.png 743444527.011.png
13.12.2011
Default groups
Incoming
Foe T
Bilde (onl
appea in he
foe oo
domain)
oo domain. Fo eample, membe of
hi gop eiding in Foe A can
ceae a one-a, incoming foe
fom Foe B. Thi one-a, incoming
foe allo e in Foe A o
acce eoce locaed in Foe B.
Membe of hi gop ae ganed he
pemiion Ceae Inbond Foe T
on he foe oo domain. Thi gop
ha no defal membe. Fo moe
infomaion abo ceaing foe ,
ee Ceae a foe 8 .
No defal e igh.
Neok
Configaion
Opeao
Membe of hi gop can make
change o TCP/IP eing and ene
and eleae TCP/IP addee on domain
conolle in he domain. Thi gop ha
no defal membe.
No defal e igh.
Pefomance
Monio Ue
Membe of hi gop can monio
pefomance cone on domain
conolle in he domain, locall and
fom emoe clien iho being a
membe of he Adminiao o
Pefomance Log Ue gop.
No defal e igh.
Pefomance
Log Ue
Membe of hi gop can manage
pefomance cone, log and ale on
domain conolle in he domain, locall
and fom emoe clien iho being a
membe of he Adminiao gop.
No defal e igh.
Pe-
Windo 2000
Compaible
Acce
Membe of hi gop hae ead acce
on all e and gop in he domain.
Thi gop i poided fo backad
compaibili fo compe nning
Windo NT 4.0 and ealie. B defal,
he pecial ideni Eeone i a
membe of hi gop. Fo moe
infomaion abo pecial ideniie, ee
Special ideniie 9 . Add e o hi
gop onl if he ae nning
Windo NT 4.0 o ealie.
Acce hi compe fom he neok;
Bpa aee checking.
Pin
Opeao
Membe of hi gop can manage,
ceae, hae, and delee pine
conneced o domain conolle in he
domain. The can alo manage Acie
Dieco pine objec in he domain.
Membe of hi gop can log on locall
o domain conolle in he domain and
h hem don. Thi gop ha no
defal membe. Becae membe of
hi gop can load and nload deice
die on all domain conolle in he
domain, add e ih caion.
Allo log on locall; Sh don he em.
technet.microsoft.com/en-us/librar/cc756898(WS.10,printer).asp
3/7
743444527.001.png 743444527.002.png
13.12.2011
Default groups
Remote
Desktop Users
Members of this group can remotel log
on to domain controllers in the domain.
This group has no default members.
No default user rights.
Replicator
This group supports director replication
functions and is used b the File
Replication service on domain controllers
in the domain. This group has no default
members. Do not add users to this
group.
No default user rights.
Server
Operators
On domain controllers, members of this
group can log on interactivel, create
and delete shared resources, start and
stop some services, back up and restore
files, format the hard disk, and shut
down the computer. This group has no
default members. Because this group has
significant power on domain controllers,
add users with caution.
Back up files and directories; Change the
sstem time; Force shutdown from a remote
sstem; Allow log on locall; Restore files
and directories; Shut down the sstem.
Users
Members of this group can perform most
common tasks, such as running
applications, using local and network
printers, and locking the server. B
default, the Domain Users group,
Authenticated Users, and Interactive are
members of this group. Therefore, an
user account created in the domain
becomes a member of this group.
No default user rights.
Gop in he Ue conaine
The following table provides a description of the default groups located in the Users container and
lists the assigned user rights for each group. For complete descriptions of the user rights listed in
the table, see User Rights Assignment 6 . For information about editing these rights, see Edit securit
settings on a Group Polic object 7 .
Gop Decipion
Defal e igh
Cert Publishers
Members of this group are
permitted to publish certificates
for users and computers. This
group has no default members.
No default user rights.
DnsAdmins
(installed with
DNS)
Members of this group have
administrative access to the DNS
Server service. This group has
no default members.
No default user rights.
technet.microsoft.com/en-us/librar/cc756898(WS.10,printer).asp
4/7
743444527.003.png 743444527.004.png 743444527.005.png
13.12.2011
Default groups
DUP
(
DNS)
M DNS
, DHCP .
T
.
N .
D A
M
. B
,
A
,
,
. B
, A
. B
,
.
A ; A
; B
; B ; C
; C ; D
; E
; F
; I ;
L ; A
; M ; M
; P
; P ; R
; R
; S ; T
.
D
C
T
. B ,
.
N .
D
C
T
.
N .
D G T
.
N .
D U
T
. B ,
. T
. F ,
,
( D U
,
,
).
N .
M
A ; A
; B
; B ; C
; C ; D
technet.microsoft.com/en-us/librar/cc756898(WS.10,printer).asp
5/7
743444527.006.png 743444527.007.png

Plik z chomika:

Inne pliki z tego folderu:

Inne foldery tego chomika:

Zgłoś jeśli naruszono regulamin