Account operators manage the user accounts on a computer or domain.

Administrators have complete and unrestricted access to the computer or domain.

Backup operators can override security restrictions for the sole purpose of backing up or restoring files.

Guests are more restricted than users.

Power users possess most administrative permissions with some restrictions. Thus, power users can run legacy applications, in addition to certified applications.

Print operators can take control of a printer.

Replicators support file replication in a domain.

System operators manage a particular computer.

Users are prevented from making accidental or intentional system-wide changes. Thus, users can run certified applications, but not most legacy applications.