Built-ins

Windows comes out of the box with built-in accounts that have predefined privileges.
These default accounts include the local Administrator account, which is the most
powerful user account in Windows. (Actually, the SYSTEM account is technically the
most privileged, but Administrator can execute commands as SYSTEM quite readily
using the Scheduler Service to launch a command shell, for example.) Table 2-1 lists the
default built-in accounts on various versions of Windows.
Note a few caveats about Table 2-1: On domain controllers, some security principals are not visible in the default
Active Directory Users and Computers interface unless you choose View |
Advanced Features. Versions of Windows including XP and later hide the local Administrator
account by default, but its still there. Some of the accounts listed in Table 2-1 are not created unless speci? c server
roles have been con? gured; for example, Application Server (IIS). The group Guests, the user accounts Guest, and Support_388945a0 are assigned
unique SIDs corresponding to the domains in which they reside.