| DomainName | ServerType | ServerName | GroupType | GroupName | GroupComment |
| domain01 | PDC | SERVER01 | GLOBAL | Cert Publishers | Enterprise certification and renewal agents |
| domain01 | PDC | SERVER01 | GLOBAL | DnsUpdateProxy | DNS clients who are permitted to perform dynamic updates on behalf of some other clients (such as DHCP servers). |
| domain01 | PDC | SERVER01 | GLOBAL | Domain Admins | Designated administrators of the domain |
| domain01 | PDC | SERVER01 | GLOBAL | Domain Computers | All workstations and servers joined to the domain |
| domain01 | PDC | SERVER01 | GLOBAL | Domain Controllers | All domain controllers in the domain |
| domain01 | PDC | SERVER01 | GLOBAL | Domain Guests | All domain guests |
| domain01 | PDC | SERVER01 | GLOBAL | Domain Users | All domain users |
| domain01 | PDC | SERVER01 | GLOBAL | Enterprise Admins | Designated administrators of the enterprise |
| domain01 | PDC | SERVER01 | GLOBAL | Group Policy Creator Owners | Members in this group can modify group policy for the domain |
| domain01 | PDC | SERVER01 | GLOBAL | Schema Admins | Designated administrators of the schema |
| domain01 | PDC | SERVER01 | LOCAL | Administrators | Administrators have complete and unrestricted access to the computer/domain |
| domain01 | PDC | SERVER01 | LOCAL | Users | Users are prevented from making accidental or intentional system-wide changes. Thus, Users can run certified applications, but not most legacy applications |
| domain01 | PDC | SERVER01 | LOCAL | Guests | Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted |
| domain01 | PDC | SERVER01 | LOCAL | Backup Operators | Backup Operators can override security restrictions for the sole purpose of backing up or restoring files |
| domain01 | PDC | SERVER01 | LOCAL | Replicator | Supports file replication in a domain |
| domain01 | PDC | SERVER01 | LOCAL | Server Operators | Members can administer domain servers |
| domain01 | PDC | SERVER01 | LOCAL | Account Operators | Members can administer domain user and group accounts |
| domain01 | PDC | SERVER01 | LOCAL | Print Operators | Members can administer domain printers |
| domain01 | PDC | SERVER01 | LOCAL | Pre-Windows 2000 Compatible Access | A backward compatibility group which allows read access on all users and groups in the domain |
| domain01 | PDC | SERVER01 | LOCAL | RAS and IAS Servers | Servers in this group can access remote access properties of users |
| domain01 | PDC | SERVER01 | LOCAL | DnsAdmins | DNS Administrators Group |
| domain01 | WORKSTATION | USER01 | LOCAL | Administrators | Administrators have complete and unrestricted access to the computer/domain |
| domain01 | WORKSTATION | USER01 | LOCAL | Backup Operators | Backup Operators can override security restrictions for the sole purpose of backing up or restoring files |
| domain01 | WORKSTATION | USER01 | LOCAL | Guests | Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted |
| domain01 | WORKSTATION | USER01 | LOCAL | Power Users | Power Users possess most administrative powers with some restrictions. Thus, Power Users can run legacy applications in addition to certified applications |
| domain01 | WORKSTATION | USER01 | LOCAL | Replicator | Supports file replication in a domain |
| domain01 | WORKSTATION | USER01 | LOCAL | Users | Users are prevented from making accidental or intentional system-wide changes. Thus, Users can run certified applications, but not most legacy applications |
| domain01 | WORKSTATION | USER02 | LOCAL | Administrators | Administrators have complete and unrestricted access to the computer/domain |
| domain01 | WORKSTATION | USER02 | LOCAL | Backup Operators | Backup Operators can override security restrictions for the sole purpose of backing up or restoring files |
| domain01 | WORKSTATION | USER02 | LOCAL | Guests | Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted |
| domain01 | WORKSTATION | USER02 | LOCAL | Power Users | Power Users possess most administrative powers with some restrictions. Thus, Power Users can run legacy applications in addition to certified applications |
| domain01 | WORKSTATION | USER02 | LOCAL | Replicator | Supports file replication in a domain |
| domain01 | WORKSTATION | USER02 | LOCAL | Users | Users are prevented from making accidental or intentional system-wide changes. Thus, Users can run certified applications, but not most legacy applications |
| domain01 | WORKSTATION | USER02 | LOCAL | Debugger Users | Debugger users can debug processes on this machine, both locally and remotely |
| domain01 | WORKSTATION | USER03 | LOCAL | Administrators | Administrators have complete and unrestricted access to the computer/domain |
| domain01 | WORKSTATION | USER03 | LOCAL | Backup Operators | Backup Operators can override security restrictions for the sole purpose of backing up or restoring files |
| domain01 | WORKSTATION | USER03 | LOCAL | Guests | Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted |
| domain01 | WORKSTATION | USER03 | LOCAL | Power Users | Power Users possess most administrative powers with some restrictions. Thus, Power Users can run legacy applications in addition to certified applications |
| domain01 | WORKSTATION | USER03 | LOCAL | Replicator | Supports file replication in a domain |
| domain01 | WORKSTATION | USER03 | LOCAL | Users | Users are prevented from making accidental or intentional system-wide changes. Thus, Users can run certified applications, but not most legacy applications |
| domain01 | WORKSTATION | USER03 | LOCAL | Debugger Users | Debugger users can debug processes on this machine, both locally and remotely |
| domain01 | WORKSTATION | SERVER01 | LOCAL | Administrators | Administrators have complete and unrestricted access to the computer/domain |
| domain01 | WORKSTATION | SERVER01 | LOCAL | Users | Users are prevented from making accidental or intentional system-wide changes. Thus, Users can run certified applications, but not most legacy applications |
| domain01 | WORKSTATION | SERVER01 | LOCAL | Guests | Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted |
| domain01 | WORKSTATION | SERVER01 | LOCAL | Backup Operators | Backup Operators can override security restrictions for the sole purpose of backing up or restoring files |
| domain01 | WORKSTATION | SERVER01 | LOCAL | Replicator | Supports file replication in a domain |
| domain01 | WORKSTATION | SERVER01 | LOCAL | Server Operators | Members can administer domain servers |
| domain01 | WORKSTATION | SERVER01 | LOCAL | Account Operators | Members can administer domain user and group accounts |
| domain01 | WORKSTATION | SERVER01 | LOCAL | Print Operators | Members can administer domain printers |
| domain01 | WORKSTATION | SERVER01 | LOCAL | Pre-Windows 2000 Compatible Access | A backward compatibility group which allows read access on all users and groups in the domain |
| domain01 | WORKSTATION | SERVER01 | LOCAL | RAS and IAS Servers | Servers in this group can access remote access properties of users |
| domain01 | WORKSTATION | SERVER01 | LOCAL | DnsAdmins | DNS Administrators Group |
| domain01 | WORKSTATION | USER04 | LOCAL | Administrators | Administrators have complete and unrestricted access to the computer/domain |
| domain01 | WORKSTATION | USER04 | LOCAL | Backup Operators | Backup Operators can override security restrictions for the sole purpose of backing up or restoring files |
| domain01 | WORKSTATION | USER04 | LOCAL | Guests | Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted |
| domain01 | WORKSTATION | USER04 | LOCAL | Network Configuration Operators | Members in this group can have some administrative privileges to manage configuration of networking features |
| domain01 | WORKSTATION | USER04 | LOCAL | Power Users | Power Users possess most administrative powers with some restrictions. Thus, Power Users can run legacy applications in addition to certified applications |
| domain01 | WORKSTATION | USER04 | LOCAL | Remote Desktop Users | Members in this group are granted the right to logon remotely |
| domain01 | WORKSTATION | USER04 | LOCAL | Replicator | Supports file replication in a domain |
| domain01 | WORKSTATION | USER04 | LOCAL | Users | Users are prevented from making accidental or intentional system-wide changes. Thus, Users can run certified applications, but not most legacy applications |
| domain01 | WORKSTATION | USER04 | LOCAL | HelpServicesGroup | Group for the Help and Support Center |
| domain01 | WORKSTATION | USER05 | LOCAL | Administrators | Administrators have complete and unrestricted access to the computer/domain |
| domain01 | WORKSTATION | USER05 | LOCAL | Backup Operators | Backup Operators can override security restrictions for the sole purpose of backing up or restoring files |
| domain01 | WORKSTATION | USER05 | LOCAL | Guests | Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted |
| domain01 | WORKSTATION | USER05 | LOCAL | Network Configuration Operators | Members in this group can have some administrative privileges to manage configuration of networking features |
| domain01 | WORKSTATION | USER05 | LOCAL | Power Users | Power Users possess most administrative powers with some restrictions. Thus, Power Users can run legacy applications in addition to certified applications |
| domain01 | WORKSTATION | USER05 | LOCAL | Remote Desktop Users | Members in this group are granted the right to logon remotely |
| domain01 | WORKSTATION | USER05 | LOCAL | Replicator | Supports file replication in a domain |
| domain01 | WORKSTATION | USER05 | LOCAL | Users | Users are prevented from making accidental or intentional system-wide changes. Thus, Users can run certified applications, but not most legacy applications |
| domain01 | WORKSTATION | USER05 | LOCAL | HelpServicesGroup | Group for the Help and Support Center |
| domain01 | WORKSTATION | USER06 | LOCAL | Administrators | Administrators have complete and unrestricted access to the computer/domain |
| domain01 | WORKSTATION | USER06 | LOCAL | Backup Operators | Backup Operators can override security restrictions for the sole purpose of backing up or restoring files |
| domain01 | WORKSTATION | USER06 | LOCAL | Guests | Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted |
| domain01 | WORKSTATION | USER06 | LOCAL | Power Users | Power Users possess most administrative powers with some restrictions. Thus, Power Users can run legacy applications in addition to certified applications |
| domain01 | WORKSTATION | USER06 | LOCAL | Replicator | Supports file replication in a domain |
| domain01 | WORKSTATION | USER06 | LOCAL | Users | Users are prevented from making accidental or intentional system-wide changes. Thus, Users can run certified applications, but not most legacy applications |
| domain01 | WORKSTATION | USER07 | LOCAL | Administrators | Administrators have complete and unrestricted access to the computer/domain |
| domain01 | WORKSTATION | USER07 | LOCAL | Backup Operators | Backup Operators can override security restrictions for the sole purpose of backing up or restoring files |
| domain01 | WORKSTATION | USER07 | LOCAL | Guests | Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted |
| domain01 | WORKSTATION | USER07 | LOCAL | Network Configuration Operators | Members in this group can have some administrative privileges to manage configuration of networking features |
| domain01 | WORKSTATION | USER07 | LOCAL | Power Users | Power Users possess most administrative powers with some restrictions. Thus, Power Users can run legacy applications in addition to certified applications |
| domain01 | WORKSTATION | USER07 | LOCAL | Remote Desktop Users | Members in this group are granted the right to logon remotely |
| domain01 | WORKSTATION | USER07 | LOCAL | Replicator | Supports file replication in a domain |
| domain01 | WORKSTATION | USER07 | LOCAL | Users | Users are prevented from making accidental or intentional system-wide changes. Thus, Users can run certified applications, but not most legacy applications |
| domain01 | WORKSTATION | USER07 | LOCAL | HelpServicesGroup | Group for the Help and Support Center |
| domain01 | WORKSTATION | USER08 | LOCAL | Administrators | Administrators have complete and unrestricted access to the computer/domain |
| domain01 | WORKSTATION | USER08 | LOCAL | Backup Operators | Backup Operators can override security restrictions for the sole purpose of backing up or restoring files |
| domain01 | WORKSTATION | USER08 | LOCAL | Guests | Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted |
| domain01 | WORKSTATION | USER08 | LOCAL | Power Users | Power Users possess most administrative powers with some restrictions. Thus, Power Users can run legacy applications in addition to certified applications |
| domain01 | WORKSTATION | USER08 | LOCAL | Replicator | Supports file replication in a domain |
| domain01 | WORKSTATION | USER08 | LOCAL | Users | Users are prevented from making accidental or intentional system-wide changes. Thus, Users can run certified applications, but not most legacy applications |
| domain01 | WORKSTATION | USER09 | LOCAL | Administrators | Administrators have complete and unrestricted access to the computer/domain |
| domain01 | WORKSTATION | USER09 | LOCAL | Backup Operators | Backup Operators can override security restrictions for the sole purpose of backing up or restoring files |
| domain01 | WORKSTATION | USER09 | LOCAL | Guests | Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted |
| domain01 | WORKSTATION | USER09 | LOCAL | Power Users | Power Users possess most administrative powers with some restrictions. Thus, Power Users can run legacy applications in addition to certified applications |
| domain01 | WORKSTATION | USER09 | LOCAL | Replicator | Supports file replication in a domain |
| domain01 | WORKSTATION | USER09 | LOCAL | Users | Users are prevented from making accidental or intentional system-wide changes. Thus, Users can run certified applications, but not most legacy applications |
| domain01 | WORKSTATION | USER09 | LOCAL | Debugger Users | Debugger users can debug processes on this machine, both locally and remotely |
| domain01 | WORKSTATION | USER10 | LOCAL | Administrators | Administrators have complete and unrestricted access to the computer/domain |
| domain01 | WORKSTATION | USER10 | LOCAL | Backup Operators | Backup Operators can override security restrictions for the sole purpose of backing up or restoring files |
| domain01 | WORKSTATION | USER10 | LOCAL | Guests | Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted |
| domain01 | WORKSTATION | USER10 | LOCAL | Power Users | Power Users possess most administrative powers with some restrictions. Thus, Power Users can run legacy applications in addition to certified applications |
| domain01 | WORKSTATION | USER10 | LOCAL | Replicator | Supports file replication in a domain |
| domain01 | WORKSTATION | USER10 | LOCAL | Users | Users are prevented from making accidental or intentional system-wide changes. Thus, Users can run certified applications, but not most legacy applications |
| domain01 | WORKSTATION | USER11 | LOCAL | Administrators | Administrators have complete and unrestricted access to the computer/domain |
| domain01 | WORKSTATION | USER11 | LOCAL | Backup Operators | Backup Operators can override security restrictions for the sole purpose of backing up or restoring files |
| domain01 | WORKSTATION | USER11 | LOCAL | Guests | Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted |
| domain01 | WORKSTATION | USER11 | LOCAL | Network Configuration Operators | Members in this group can have some administrative privileges to manage configuration of networking features |
| domain01 | WORKSTATION | USER11 | LOCAL | Power Users | Power Users possess most administrative powers with some restrictions. Thus, Power Users can run legacy applications in addition to certified applications |
| domain01 | WORKSTATION | USER11 | LOCAL | Remote Desktop Users | Members in this group are granted the right to logon remotely |
| domain01 | WORKSTATION | USER11 | LOCAL | Replicator | Supports file replication in a domain |
| domain01 | WORKSTATION | USER11 | LOCAL | Users | Users are prevented from making accidental or intentional system-wide changes. Thus, Users can run certified applications, but not most legacy applications |
| domain01 | WORKSTATION | USER11 | LOCAL | HelpServicesGroup | Group for the Help and Support Center |
| domain01 | WORKSTATION | USER12 | LOCAL | Administrators | Administrators have complete and unrestricted access to the computer |
| domain01 | WORKSTATION | USER12 | LOCAL | Backup Operators | Backup Operators can override security restrictions for the sole purpose of backing up or restoring files |
| domain01 | WORKSTATION | USER12 | LOCAL | Guests | Guests have the same access as members of the Users group by default, except for the Guest account which is further restricted |
| domain01 | WORKSTATION | USER12 | LOCAL | Network Configuration Operators | Members in this group can have some administrative privileges to manage configuration of networking features |
| domain01 | WORKSTATION | USER12 | LOCAL | Power Users | Power Users possess most administrative powers with some restrictions. Thus, Power Users can run legacy applications in addition to certified applications |
| domain01 | WORKSTATION | USER12 | LOCAL | Remote Desktop Users | Members in this group are granted the right to logon remotely |
| domain01 | WORKSTATION | USER12 | LOCAL | Users | Users are prevented from making accidental or intentional system-wide changes. Thus, Users can run certified applications, but not most legacy applications |
| domain01 | WORKSTATION | USER12 | LOCAL | Debugger Users | Debugger users can debug processes on this machine, both locally and remotely |
| domain01 | WORKSTATION | USER12 | LOCAL | HelpServicesGroup | Group for the Help and Support Center |