Built-in account ADMINISTRATOR

Question

noticed that ADMINISTRATOR(Built-in account) is a member of many groups:
1.Administrators
2.Domain Admins
3.Domain Users
4.Exchange Domain Servers
5.Exchange Services
6.Group Policy Creator Owners
7.Protected Users
8.RASAdmins
9.SqlDtsUsers
10.SYSTEM-VAX

Is it required? have to ? Or is there something unnecessary? Is there a recommendation in which groups he will be a member?

Answer 1

Hello @Elazara Arbiv ,

Thank you so much for posting here.

I checked in my lab that the built-in administrator is a member of the following groups:

1. Administrators
2. Domain Admins
3. Domain Users
4. Group Policy Creator Owners
5. Schema Admins
6. Enterprise Admins

As for the groups:
4. Exchange Domain Servers
5. Exchange Services
8. RASAdmins
9. SqlDtsUsers
10. SYSTEM-VAX

I checked that there are no these groups in my lab. Maybe we could have a check with the products teams, such as exchange, SQL.

As for the group Protected Users, there is no member in my lab. For more information about this group, please refer to:
https://learn.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/protected-users-security-group

For any question, please feel free to contact us.

Best regards,
Hannah Xiong