This is work in progress, more to come.
Alphabetical
| Name | SID | added in | Edition | UAC |
|---|---|---|---|---|
| Access Control Assistance Operators | S-1-5-32-579 | |||
| Account Operators | S-1-5-32-548 | SERVER | ||
| Administrators | S-1-5-32-544 | Windows NT 3.1 | SPLIT | |
| Backup Operators | S-1-5-32-551 | Windows NT 3.1 | SPLIT | |
| Cryptographic Operators | S-1-5-32-569 | |||
| Distributed COM Users | S-1-5-32-562 | Server 2003 SP1 | ||
| Event Log Readers | S-1-5-32-573 | |||
| Guests | S-1-5-32-546 | Windows NT 3.1 | ||
| Hyper-V Administrators | S-1-5-32-578 | |||
| IIS_IUSRS | S-1-5-32-568 | |||
| Network Configuration Operators | S-1-5-32-556 | SPLIT | ||
| Performance Log Users | S-1-5-32-559 | |||
| Performance Monitor Users | S-1-5-32-558 | |||
| Power Users | S-1-5-32-547 | Windows NT 3.1 | SPLIT | |
| Print Operators | S-1-5-32-550 | SERVER | ||
| RDS Endpoint Servers | S-1-5-32-576 | SERVER | ||
| RDS Management Servers | S-1-5-32-577 | SERVER | ||
| RDS Remote Access Servers | S-1-5-32-575 | SERVER | ||
| Remote Desktop Users | S-1-5-32-555 | |||
| Remote Management Users | S-1-5-32-580 | |||
| Replicator | S-1-5-32-552 | Windows NT 3.1 | ||
| Server Operators | S-1-5-32-549 | SERVER | ||
| System Managed Accounts Group | S-1-5-32-581 | Windows 10 | ||
| Users | S-1-5-32-545 | Windows NT 3.1 |