Published by


Brink's Avatar
Administrator

Posts: 23,569

Show Printable Version 


How to Add or Remove Users from Groups in Windows 10

information   Information
You can limit the ability of users to perform certain actions by adding or removing the user from being a member of groups. Each group has its own default rights and permissions. When a user is a member of a group, the user will be assigned the rights and permissions of the group to them.

A right authorizes a user to perform certain actions on a computer, such as backing up files and folders or shutting down a computer.

A permission is a rule that is associated with an object (usually a file, folder, or printer), and it regulates which users can have access to the object and in what manner.

This tutorial will show you how to add or remove users as members of groups to limit the ability of users to perform certain actions in Windows 10.

You must be signed in as an administrator to add or remove users from groups.

warning   Warning
Changes to a users's group membership are not effective until the next time the user signs in.

Note   Note
The following table provides descriptions of the default local groups that are located in the Groups folder in Local Users and Groups (lusrmgr.msc).

Group Description
Access Control Assistance Operators Members of this group can remotely query authorization attributes and permissions for resources on this computer.
Administrators Members of this group have full control of the computer, and they can assign user rights and access control permissions to users as necessary. The Administrator account is a default member of this group. When a computer is joined to a domain, the Domain Admins group is added to this group automatically. Because this group has full control of the computer, use caution when you add users to it.
Backup Operators Members of this group can back up and restore files on a computer, regardless of any permissions that protect those files. This is because the right to perform a backup takes precedence over all file permissions. Members of this group cannot change security settings.
Cryptographic Operators Members of this group are authorized to perform cryptographic operations.
Distributed COM Users Members of this group are allowed to start, activate, and use DCOM objects on a computer.
Event Log Readers Members of this group can read event logs from local machine.
Guests In a computer joined to the domain, members of this group have a temporary profile created at log on, and when the member logs off, the profile is deleted. Profiles in workgroup environments are not deleted. The Guest account (which is disabled by default) is also a default member of this group.

Members of this group will have a temporary profile created at log on, and when the member logs off, the profile will be deleted. The Guest account (which is disabled by default) is also a default member of this group.
Hyper-V Administrators Members of this group have complete and unrestricted access to all features of Hyper-V.
IIS_IUSRS This is a built-in group that is used by Internet Information Services (IIS).
Network Configuration Operators Members of this group can make changes to TCP/IP settings, and they can renew and release TCP/IP addresses. This group has no default members.
Performance Log Users Members of this group can manage performance counters, logs, and alerts on a computer both locally and from remote clients without being a member of the Administrators group.
Performance Monitor Users Members of this group can monitor performance counters on a computer locally and from remote clients without being a member of the Administrators group or the Performance Log Users groups
Power Users By default, members of this group have no more user rights or permissions than a standard user account. The Power Users group in previous versions of Windows was designed to give users specific administrator rights and permissions to perform common system tasks. In this version of Windows, standard user accounts inherently have the ability to perform most common configuration tasks, such as changing time zones. For legacy applications that require the same Power User rights and permissions that were present in previous versions of Windows, administrators can apply a security template that enables the Power Users group to assume the same rights and permissions that were present in previous versions of Windows.
Remote Desktop Users Members of this group can log on to the computer remotely.
Remote Management Users Members of this group can access WMI resources over management protocols (such as WS-Management via the Windows Remote Management service). This applies only to WMI namespaces that grant access to the user.
Replicator This group supports replication functions. The only member of the Replicator group should be a domain user account that is used to log on the Replicator services of a domain controller. Do not add user accounts of actual users to this group.
System Managed Accounts Group Members of this group are managed by the system.
Users Members of this group can perform common tasks, such as running applications, using local and network printers, and locking the computer. Members of this group cannot share directories or create local printers. By default, the Domain Users, Authenticated Users, and Interactive groups are members of this group.Therefore, any user account that is created in the domain becomes a member of this group.
HomeUsers HomeUsers Security Group

CONTENTS:
  • Option One: To Add Groups to Users from Users folder in Local Users and Groups
  • Option Two: To Remove Groups from Users from Users folder in Local Users and Groups
  • Option Three: To Add Users to Groups from Groups folder in Local Users and Groups
  • Option Four: To Remove Users from Groups from Groups folder in Local Users and Groups
  • Option Five: To Add User to Group in Command Prompt
  • Option Six: To Remove User from Group in Command Prompt
  • Option Seven: To Add User to Group in PowerShell
  • Option Eight: To Remove User from Group in PowerShell





Add or Remove Users from Groups in Windows 10 OPTION ONE Add or Remove Users from Groups in Windows 10
To Add Groups to Users from Users folder in Local Users and Groups

Note   Note
Local Users and Groups is only available in the Windows 10 Pro, Enterprise, and Education editions.

All editions can use Option Five below.


1. Press the Win+R keys to open Run, type lusrmgr.msc into Run, and click/tap on OK to open Local Users and Groups.

2. Click/tap on Users in the left pane of Local Users and Groups. (see screenshot below step 3)

3. Right click or press and hold on the user name (ex: "Brink2") you want to add groups to be a member of, and click/tap on Properties. (see screenshot below)

Name:  lusrmgr_Users_member_of_groups-1.jpg
Views: 827
Size:  45.2 KB

4. Click/tap on the Member Of tab, and click/tap on the Add button. (see screenshot below)

Name:  lusrmgr_Users_add_member_of_groups-2.png
Views: 803
Size:  20.6 KB

5. Click/tap on the Advanced button. (see screenshot below)

Name:  lusrmgr_Users_add_member_of_groups-3.png
Views: 799
Size:  16.5 KB

6. Click/tap on the Find Now button, select the name of the group (ex: "Administrators") you want to add, and click/tap on OK. (see screenshot below)
Note   Note
If you like, you can press and hold the Ctrl key to select more than one group.


Name:  lusrmgr_Users_add_member_of_groups-4.png
Views: 806
Size:  61.3 KB

7. Click/tap on OK. (see screenshot below)

Name:  lusrmgr_Users_add_member_of_groups-5.png
Views: 799
Size:  17.4 KB

8. Click/tap on OK. (see screenshot below)

Name:  lusrmgr_Users_add_member_of_groups-6.png
Views: 796
Size:  20.1 KB

9. When finished, you can close Local Users and Groups if you like.






Add or Remove Users from Groups in Windows 10 OPTION TWO Add or Remove Users from Groups in Windows 10
To Remove Groups from Users from Users folder in Local Users and Groups

Note   Note
Local Users and Groups is only available in the Windows 10 Pro, Enterprise, and Education editions.

All editions can use Option Six below.


1. Press the Win+R keys to open Run, type lusrmgr.msc into Run, and click/tap on OK to open Local Users and Groups.

2. Click/tap on Users in the left pane of Local Users and Groups. (see screenshot below step 3)

3. Right click or press and hold on the user name (ex: "Brink2") you want to remove groups from, and click/tap on Properties. (see screenshot below)

Name:  lusrmgr_Users_member_of_groups-1.jpg
Views: 827
Size:  45.2 KB

4. Click/tap on the Member Of tab, select the group (ex: "Administrators") you want to remove, and click/tap on the Remove button. (see screenshot below)
Note   Note
If you like, you can press and hold the Ctrl key to select more than one group.


Name:  lusrmgr_Users_remove_member_of_groups-2.png
Views: 799
Size:  24.8 KB

5. Click/tap on OK. (see screenshot below)

Name:  lusrmgr_Users_add_member_of_groups-6.png
Views: 796
Size:  20.1 KB

6. When finished, you can close Local Users and Groups if you like.






Add or Remove Users from Groups in Windows 10 OPTION THREE Add or Remove Users from Groups in Windows 10
To Add Users to Groups from Groups folder in Local Users and Groups

Note   Note
Local Users and Groups is only available in the Windows 10 Pro, Enterprise, and Education editions.

All editions can use Option Five below.


1. Press the Win+R keys to open Run, type lusrmgr.msc into Run, and click/tap on OK to open Local Users and Groups.

2. Click/tap on Groups in the left pane of Local Users and Groups. (see screenshot below step 3)

3. Right click or press and hold on the group name (ex: "Administrators") you want to add users as members of, and click/tap on Properties. (see screenshot below)

Click image for larger version. 

Name:	lusrmgr_Groups_Add_members-1.jpg 
Views:	30 
Size:	118.9 KB 
ID:	142141

4. Click/tap on the Add button. (see screenshot below)

Name:  lusrmgr_Groups_Add_members-2.png
Views: 794
Size:  24.1 KB

5. Click/tap on the Advanced button. (see screenshot below)

Name:  lusrmgr_Groups_Add_members-3.png
Views: 796
Size:  16.7 KB

6. Click/tap on the Find Now button, select the name of the user account (ex: "Brink2") you want to add as a member, and click/tap on OK. (see screenshot below)
Note   Note
If you like, you can press and hold the Ctrl key to select more than one user.


Name:  lusrmgr_Groups_Add_members-4.jpg
Views: 794
Size:  83.6 KB

7. Click/tap on OK. (see screenshot below)

Name:  lusrmgr_Groups_Add_members-5.png
Views: 794
Size:  17.6 KB

8. Click/tap on OK. (see screenshot below)

Name:  lusrmgr_Groups_Add_members-6.png
Views: 796
Size:  25.2 KB

9. When finished, you can close Local Users and Groups if you like.






Add or Remove Users from Groups in Windows 10 OPTION FOUR Add or Remove Users from Groups in Windows 10
To Remove Users from Groups from Groups folder in Local Users and Groups

Note   Note
Local Users and Groups is only available in the Windows 10 Pro, Enterprise, and Education editions.

All editions can use Option Six below.


1. Press the Win+R keys to open Run, type lusrmgr.msc into Run, and click/tap on OK to open Local Users and Groups.

2. Click/tap on Groups in the left pane of Local Users and Groups. (see screenshot below step 3)

3. Right click or press and hold on the group name (ex: "Administrators") you want to remove users as members of, and click/tap on Properties. (see screenshot below)

Click image for larger version. 

Name:	lusrmgr_Groups_Add_members-1.jpg 
Views:	30 
Size:	118.9 KB 
ID:	142141

4. Select a user name (ex: "Brink2") you want to remove as a member, and click/tap on the Remove button. (see screenshot below)
Note   Note
If you like, you can press and hold the Ctrl key to select more than one user.


Name:  lusrmgr_Groups_Remove_members-2.png
Views: 807
Size:  29.0 KB

5. Click/tap on OK. (see screenshot below)

Name:  lusrmgr_Groups_Remove_members-3.png
Views: 803
Size:  24.0 KB

6. When finished, you can close Local Users and Groups if you like.






Add or Remove Users from Groups in Windows 10 OPTION FIVE Add or Remove Users from Groups in Windows 10
To Add User to Group in Command Prompt

1. Open an elevated command prompt.

2. Type the command below into the elevated command prompt, and press Enter. (see screenshot below)

net localgroup "Group" "User" /add

Note   Note
Substitute Group in the command above with the actual name of the group (ex: "Administrators") you want the user to be a member of.

Substitute User in the command above with the actual name of the user account (ex: "Brink2") you want to be a member of the group.

For example: net localgroup "Administrators" "Brink2" /add


3. When finished, you can close the elevated command prompt if you like.

Name:  Add_user_as_member_of_group_command.jpg
Views: 802
Size:  39.3 KB






Add or Remove Users from Groups in Windows 10 OPTION SIX Add or Remove Users from Groups in Windows 10
To Remove User from Group in Command Prompt

1. Open an elevated command prompt.

2. Type the command below into the elevated command prompt, and press Enter. (see screenshot below)

net localgroup "Group" "User" /delete

Note   Note
Substitute Group in the command above with the actual name of the group (ex: "Administrators") you want the user to no longer be a member of.

Substitute User in the command above with the actual name of the user account (ex: "Brink2") you want to no longer be a member of the group.

For example: net localgroup "Administrators" "Brink2" /delete


3. When finished, you can close the elevated command prompt if you like.

Name:  Remove_user_as_member_of_group_command.jpg
Views: 807
Size:  39.4 KB






Add or Remove Users from Groups in Windows 10 OPTION SEVEN Add or Remove Users from Groups in Windows 10
To Add User to Group in PowerShell

Note   Note
For more Add-LocalGroupMember command options and details, see: Add-LocalGroupMember - Microsoft Developer Network


1. Open an elevated PowerShell.

2. Type the command below into the elevated PowerShell, and press Enter. (see screenshot below)

Add-LocalGroupMember -Group "Group" -Member "User"

Note   Note
Substitute Group in the command above with the actual name of the group (ex: "Administrators") you want the user to be a member of.

Substitute User in the command above with the actual name of the user account (ex: "Brink2") you want to be a member of the group.

For example: Add-LocalGroupMember -Group "Administrators" -Member "Brink2"


3. When finished, you can close the elevated PowerShell if you like.

Click image for larger version. 

Name:	Add_user_to_group_in_PowerShell.png 
Views:	14 
Size:	19.6 KB 
ID:	144047






Add or Remove Users from Groups in Windows 10 OPTION EIGHT Add or Remove Users from Groups in Windows 10
To Remove User from Group in PowerShell

Note   Note
For more Remove-LocalGroupMember command options and details, see: Remove-LocalGroupMember - Microsoft Developer Network


1. Open an elevated PowerShell.

2. Type the command below into the elevated PowerShell, and press Enter. (see screenshot below)

Remove-LocalGroupMember -Group "Group" -Member "User"

Note   Note
Substitute Group in the command above with the actual name of the group (ex: "Administrators") you want the user to no longer be a member of.

Substitute User in the command above with the actual name of the user account (ex: "Brink2") you want to no longer be a member of the group.

For example: Remove-LocalGroupMember -Group "Administrators" -Member "Brink2"


3. When finished, you can close the elevated PowerShell if you like.

Click image for larger version. 

Name:	Remove_user_from_group_in_PowerShell.png 
Views:	14 
Size:	19.8 KB 
ID:	144048


That's it,
Shawn


Related Tutorials