A group that includes all users, even anonymous users, and guests. Membership is controlled by the operating system.
A group that includes all users that have logged on interactively. Membership is controlled by the operating system
A group that includes all users whose identities were authenticated when they logged on. Membership is controlled by the operating system.
A user account for the system administrator. By default, it is the only user account that is given full control over the system.
A global group whose members are authorized to administer the domain. By default, the Domain Admins group is a member of the Administrators group on all computers that have joined a domain, including the domain controllers. Domain Admins is the default owner of any object that is created by any member of the group.
A global group that, by default, includes all user accounts in a domain. When you create a user account in a domain, it is added to this group by default.
A built-in group. After the initial installation of the operating system, the only member of the group is the Administrator account. When a computer joins a domain, the Domain Admins group is added to the Administrators group. When a server becomes a domain controller, the Enterprise Admins group also is added to the Administrators group.
A built-in group. After the initial installation of the operating system, the only member is the Authenticated Users group. When a computer joins a domain, the Domain Users group is added to the Users group on the computer.
With the release of Windows 2008, some of the above SID's has been changed.