Users
Administrators
These users have the most privileges. They can access any files on the system, and are also able to make changes any system configuration parameter.
Standard Users
These users can only perform limited tasks on the computer. They are generally not allowed to make any permanent or essential changes to the system. They are also limited to the files they can access.
Any user with administrative privileges will be part of the Administrators group. While standard users are part of the Users group.
Additionally, there are some special built-in accounts used by the operating system in the context of privilege escalation:
SYSTEM
/ LocalSystem
An account used by the operating system to perform internal tasks. It has full access to all files and resources available on the host with even higher privileges than administrators.
Local Service
Default account used to run Windows services with minimum privileges. It will use anonymous connections over the network.
Network Service
Default account used to run Windows services with minimum privileges. It will use the computer credentials to authenticate through the network.
Last updated