Question

_________ users have more privileges than common users​

Answer 1

Answer:

Members of Privileged Groups

Active Directory has built-in privileged groups for privileged accounts; this is an obvious place to start. These groups are; “Administrators”, “Domain Admins”, “Enterprise Admins”, “Schema Admins”, “DnsAdmins” and “Group Policy Creator Owners”. Other places to look are Local Administrator Groups on client systems.

A few of the built-in privileged groups can be located in the “Built-in” container, while others are in the “Users” container. The “DS Restore Mode Administrator” privileged account is not stored in Active Directory.

To identify members of the built-in Active Directory privileged groups, do the following:

1. Open “Active Directory Users & Computers” on the Domain Controller.

2. Select “Built-in” container, right-click on any of the above groups in the right pane, and open its “Properties” windows.

3. Go to the “Members” tab; there you will see all members of this group. All are privileged users.

Note: If you are looking into a group in the “Users” container, you will have to select that group in the right pane and right-click on it in step 2.

In the following image, you can see privileged user accounts in the “Administrators” group:

Figure 1: Privileged users in the Administrators group

In our case, as you can see in the above image (Figure 1), the “Administrators” group has many other groups as members. They, in turn, may have other groups as members and so on. The users who are members of such groups are also privileged users. By navigating through nested members, you will uncover the complete list of group members.