Windows 2000 PC

Logging in to your Windows 2000 Computer

User Groups Overview

This document is an additional fact sheet on the differences between various user groups in Windows 2000. Please read the documentation on Domain and Passwords in Windows 2000 before reading this document.

Every user account on a Windows 2000 machine is part of a local user group on that computer. A user group is a set of users who have a certain amount of control over the Windows 2000 computer. The four primary user groups are Administrators, Power Users, Users, and Guests.

All domain accounts are part of the Power Users group on public Windows 2000 computers. Local accounts may be created on a specific Windows 2000 computer as part of any user group on that computer.

The tasks permitted to each group are outlined below.

• Administrators
• Power Users
• Users
• Guests

Administrators

Members of the Administrator group have total control over the computer and everything on it. The user named Administrator is the default account within this group. The domain account of each faculty or staff member with a Windows 2000 computer is part of the Administrator group on his or her computer.

Administrators Can:

• Create, modify, and access local user accounts
• Install new hardware and software
• Upgrade the operating system
• Back up the system and files
• Claim ownership of files that have become damaged
• Do anything a Power User can

Power Users

The Power User class can perform any task except for those reserved for Administators. They are allowed to carry out functions that will not directly affect the operating system or risk security. All domain accounts are part of the Power Users group on public Windows 2000 computers.

Power Users Can:

• Create local user accounts
• Modify user accounts which they have created
• Change user permissions on users, power users, and guests
• Install and run applications that do not affect the operating system
• Customize settings and resources on the Control Panel, such as Printers, Date/Time, and Power Options
• Do anything a User can

Power Users Cannot:

• Access other users' data without permission
• Delete or modify user accounts they did not create

Users

Users can perform common tasks, but have little power to affect the computer outside of their own account. The Users group is the most secure environment in which to run programs, since a User cannot affect the operating system or program files.

Users Can:

• Create, modify, and delete their own data files
• Run system-wide or personally installed applications
• Change their personal settings
• Install programs for their own use only
• Access the network
• Print to local or networked printers
• Do anything a Guest can

Users Cannot:

• Modify system-wide settings, operating system files, or program files
• Affect other users' data or desktop settings
• Install applications that can be run by other users
• Add printers
• Configure the system for file sharing

Guests

The Guests group grants limited access to occasional or one-time users. Once a Guest logs out, all files created by the guest is deleted.

Guests Can:

• Log in and out
• Run installed applications
• Navigate through the file system
• Shut down the system

Guests Cannot:

• Do anything else.

• Susan Richmansrichman@wellesley.edu
• Information Services
• Date Created: July 12, 2002
• Last Modified: December 18, 2002
• Page Expires: June 30, 2003