Users being added in my non admin account in admin group

Default account is a system manged account that is multi user in scope so it does things over multiple users. The other stuff means Networking and services between a remote pc are you doing any networking stuff?

This is kind of hard to define because i don't know your computer.

You may want to read this it will tell you what those accounts do and then you need to work out why they are in the hierarchy they are in.

https://learn.microsoft.com/en-us/wi...ty-identifiers

Malneb said:

Default account is a system manged account that is multi user in scope so it does things over multiple users. The other stuff means Networking and services between a remote pc are you doing any networking stuff?

This is kind of hard to define because i don't know your computer.

Ok thanks about default account. But then the bigger concern is those other two in admin group, because i dont use my pc for remote stuff i disabled all of it. Well i am using oculus quest with my pc over virtual desktop that is for the use with VR like oculus to connect over wifi. But if im able to use it even though i removed those 2 from the admin group then it has nothing to do with that. Could a program in my pc add it self to the admin group? Could it be a software i use that added itself there?

- - - Updated - - -

I removed them 10 hours ago then went to bed, and overnight it has been added back without me even using the pc meaning I have not installed or started any software on my pc it has added it back all by itself, how is that possible?

- - - Updated - - -

it seems to be added everytime i restart the pc, i might have restarted it before going to bed, but i need to know what is adding it back when i restart, and if this is a security risk at all, if its not then i wont care about it. i cant figure this out by myself hence why im asking you guys

Try3 said:

They are all normal.
Don't worry about it.
You have merely not noticed them before.

Denis

You see, i have another windows boot on the same pc, and on that i dont have those in admin group and the setup is the same. I mean how is that not a security issue if those sids are in admin group giving them admin rights?

Disable Default account and see if that changes the outcome. I have mine disabled because you don't need it and it posses a risk and i can't recall the context for NTAUTHORITY its going over my head atm and there is random open ended information online when i try to research it.

I don't have any NTAUTHORITY users in any of my groups the only account in my Adminstrators group is the proper Admin account and my actual account.

Look in task manager and see if there is any applications running under the NTAUTHORITY user.

-Local user as in the account you are signed into
-SYSTEM
-LOCAL SERVICE
-NETWORK SERVICE
-ANONYMOUS USER
-DWM1
-UMFD-0

These are the only users that are running stuff on my computer atm.