Local Group Management For Windows From Command Line
Modern operating systems like Linux, Windows uses groups to manage user rights more flexible way. Users generally assigned to the groups to use groups related privileges like
Local Admin ,
Remote Desktop User ,
Power User , etc. In this tutorial we will look how manage manage local user groups in Windows operating systems.
Help and syntax information about local groups can be printed with the following command.
$ net localgroup /?
Local groups can be listed with
net localgroup command. This will list local groups not domain groups.
$ net localgroup
As we can see groups are listed line by line. These groups are default groups those came with Windows Operating System.
Administratorsis most privileged groups used for administration
Usersis least privileged user used for normal users.
Windows local groups can be create with
/ADD option easily. We will create a local group named
Developers in this example.
$ net localgroup Developers /ADD
We get the message of successful group creation.
Local groups can be removed if we have no need for them. We will use
/DELETE option to remove group.
$ net localgroup Developers /DELETE
List Group Users
One of the most used option is listing given group users. We need to provides the local group name for its users. In this example we will list local group named
$ net localgroup “Administrators”
As we can see the local groups alias and comment about the group is printed too. Administrators local group have two users named
ismail . Do not confuse user
Administrator with the local group
Administrators they are different entities.
Add User To A Group
We can add existing user to the local group by providing the user named and
/ADD option. In this example we will add user
ismail to the
Developers group. So user ismail will use all resources and privileges provided by
$ net localgroup Developers ismail /ADD
Add Comment To The Group
In busy environment we will manageme a lot of builtin and administrator created groups. We need some clues about these local groups to remember. Or we can set some notes like when we will delete these groups. All these information can be stored in comments about group. We will set some note about
$ net localgroup Developers /COMMENT:"Only 10.1.0.0/24 network"
The comment can be viewer with GUI or while listing group members.