security account

Returns a security account constant corresponding to an account with the privilege specified in the string.

Returns a security account constant corresponding to an 'account with privileges'.

This refers to users who have logged in anonymously.

This refers to a group including users whose identities were authenticated when they logged on. Membership is controlled by the operating system.

This refers to a group including all users who have logged on through a batch queue facility such as the task scheduler. Membership is controlled by the operating system.

This refers to a built-in group . After the initial installation of the OS, the first member of the group is the Administrator account. When a computer then joins a domain, the Domain Admins group is added to the Administrators group. When a server becomes a domain controller, the Enterprise Admins group is also added to the Administrators group. The Administrators group has built-in capabilities that give its members full control over the system. The group is the default owner of any object that is created by any other member of the group.

This refers to a built-in group which, by default, has no members. Backup Operators can back up and restore all files on a computer, regardless of file permissions. Backup Operators can log on to a computer and shut it down.

This refers to a built-in group which, by default, only contains the Guest account. This group allows otherwise unauthorized users to log on with limited privileges to a computer's built-in Guest account.

This refers to XP machines, where some admin privileges include managing the configuration of networking features.

This refers to a built-in group which, by default, has no members. This group does not exist for domain controllers. Power Users can create other local users and groups as well as modify and delete accounts. They can also remove users from the other groups. Power Users also can install, manage and delete applications, local printers and file shares.

This refers to the XP only. Members of this group are granted the right to log in remotely.

This refers to Windows NT domains. This group is called Replicators and is used by the directory replication service. In 2K/XP the group is present but is not used.

This refers to a built-in group. After the initial installation of the OS, the first member is the Authenticated Users group. When a computer subsequently joins a domain, the Domain Users group is added to the Users group. These users can perform tasks such as running applications, using printers, shutting down or locking the computer. Users can install applications for their use only, provided the installation program supports per-user installation.

This refers to a placeholder in an inheritable access control entry (ACE). When the ACE is inherited, the system replaces the SID with the one from the primary group of the object's current owner. The primary group is used only by the POSIX subsystem.

This refers to a placeholder in an inheritable access control entry (ACE). When the ACE is inherited, the system replaces this SID with the one from the object's current owner.

Refers to a group implicitly including all users who logged in to the system through a dial-up connection. Membership is controlled by the operating system.

This refers to a group including all users, even anonymous users and guests. Membership is controlled by the operating system.

This refers to a group including all users who have logged on interactively. Membership is controlled by the operating system.

Returns a security account constant corresponding to a 'local service group'.

This refers to a group implicitly including all users who are logged on through a network connection. Membership is controlled by the operating system.

Returns a security account constant corresponding to a 'network service group'.

Refers to the group of users who log on using an RDP connection.

This is a named inspector that uses the LookupAccountName API function to return an object representing a user or group.

This refers to a group including all security principals that have logged on as a service. Membership is controlled by the operating system.

Returns a security account constant corresponding to a 'system group'.

Refers to a group including all users who have logged on to a Terminal Services server. Membership is controlled by the operating system.

Returns a security account constant corresponding to a numbered 'well known account'.

Returns a string describing the privileges assigned to the specified security account. For more information, see the MSDN article on LsaEnumerateAccountRights. For a description of the possible constants that can be returned, see the articles on Account Rights Constants and Privilege Constants.

Returns the Security ID (SID) associated with the specified security account.