Local Users group and the machine account

Question

Can someone please explain why that I see the machine account if I list the Users group on some systems while it doesn't exist on others (same OS)?

Thread source link: https://social.technet.microsoft.com/Forums/windows/en-US/3c11ac3c-6ec1-45bf-9da6-bd9a37c07529/local-users-group-and-the-machine-account?forum=winserver8gen

Answer 1

I am sorry, now I understand it is the "Users" group under Local Users and Groups.

We can check whether someone adds this machine account to "Users" group of domain-joined machines using the following GPO.

Computer Configuration\Preferences\Local Users and Groups->right click "Local Users and Groups"\New\Local Group

OR

Computer Configuration\Policies\Windows Settings\Security Settings\Restriected Groups

1.We can logon one problematic machine with domain administrator account.
2.Open CMD and run as Administrator.
3.Type gpresult /h C:\localgroup.html and click Enter.
4.Open the html to check whether there is any one of the two group policy settings.