Add or Remove Users from Groups in Windows 10  

    Add or Remove Users from Groups in Windows 10

    Add or Remove Users from Groups in Windows 10

    How to Add or Remove Users from Groups in Windows 10
    Published by Category: User Accounts
    09 Aug 2019
    Designer Media Ltd


    How to Add or Remove Users from Groups in Windows 10


    You can limit the ability of users to perform certain actions by adding or removing the user from being a member of groups. Each group has its own default rights and permissions. When a user is a member of a group, the user will be assigned the rights and permissions of the group to them.

    A right authorizes a user to perform certain actions on a computer, such as backing up files and folders or shutting down a computer.

    A permission is a rule that is associated with an object (usually a file, folder, or printer), and it regulates which users can have access to the object and in what manner.

    This tutorial will show you how to add or remove users as members of groups to limit the ability of users to perform certain actions in Windows 10.

    You must be signed in as an administrator to add or remove users from groups.

    warning   Warning
    Changes to a users's group membership are not effective until the next time the user signs in.

    Note   Note
    The following table provides descriptions of the default local groups that are located in the Groups folder in Local Users and Groups (lusrmgr.msc).

    Group Description
    Access Control Assistance Operators Members of this group can remotely query authorization attributes and permissions for resources on this computer.
    Administrators Members of this group have full control of the computer, and they can assign user rights and access control permissions to users as necessary. The Administrator account is a default member of this group. When a computer is joined to a domain, the Domain Admins group is added to this group automatically. Because this group has full control of the computer, use caution when you add users to it.
    Backup Operators Members of this group can back up and restore files on a computer, regardless of any permissions that protect those files. This is because the right to perform a backup takes precedence over all file permissions. Members of this group cannot change security settings.
    Cryptographic Operators Members of this group are authorized to perform cryptographic operations.
    Distributed COM Users Members of this group are allowed to start, activate, and use DCOM objects on a computer.
    Event Log Readers Members of this group can read event logs from local machine.
    Guests In a computer joined to the domain, members of this group have a temporary profile created at log on, and when the member logs off, the profile is deleted. Profiles in workgroup environments are not deleted. The Guest account (which is disabled by default) is also a default member of this group.

    Members of this group will have a temporary profile created at log on, and when the member logs off, the profile will be deleted. The Guest account (which is disabled by default) is also a default member of this group.
    Hyper-V Administrators Members of this group have complete and unrestricted access to all features of Hyper-V.
    IIS_IUSRS This is a built-in group that is used by Internet Information Services (IIS).
    Network Configuration Operators Members of this group can make changes to TCP/IP settings, and they can renew and release TCP/IP addresses. This group has no default members.
    Performance Log Users Members of this group can manage performance counters, logs, and alerts on a computer both locally and from remote clients without being a member of the Administrators group.
    Performance Monitor Users Members of this group can monitor performance counters on a computer locally and from remote clients without being a member of the Administrators group or the Performance Log Users groups
    Power Users By default, members of this group have no more user rights or permissions than a standard user account. The Power Users group in previous versions of Windows was designed to give users specific administrator rights and permissions to perform common system tasks. In this version of Windows, standard user accounts inherently have the ability to perform most common configuration tasks, such as changing time zones. For legacy applications that require the same Power User rights and permissions that were present in previous versions of Windows, administrators can apply a security template that enables the Power Users group to assume the same rights and permissions that were present in previous versions of Windows.
    Remote Desktop Users Members of this group can log on to the computer remotely.
    Remote Management Users Members of this group can access WMI resources over management protocols (such as WS-Management via the Windows Remote Management service). This applies only to WMI namespaces that grant access to the user.
    Replicator This group supports replication functions. The only member of the Replicator group should be a domain user account that is used to log on the Replicator services of a domain controller. Do not add user accounts of actual users to this group.
    System Managed Accounts Group Members of this group are managed by the system.
    Users Members of this group can perform common tasks, such as running applications, using local and network printers, and locking the computer. Members of this group cannot share directories or create local printers. By default, the Domain Users, Authenticated Users, and Interactive groups are members of this group.Therefore, any user account that is created in the domain becomes a member of this group.
    HomeUsers HomeUsers Security Group

    CONTENTS:
    • Option One: To Add Groups to Users from Users folder in Local Users and Groups
    • Option Two: To Remove Groups from Users from Users folder in Local Users and Groups
    • Option Three: To Add Users to Groups from Groups folder in Local Users and Groups
    • Option Four: To Remove Users from Groups from Groups folder in Local Users and Groups
    • Option Five: To Add User to Group in Command Prompt
    • Option Six: To Remove User from Group in Command Prompt
    • Option Seven: To Add User to Group in PowerShell
    • Option Eight: To Remove User from Group in PowerShell





    Add or Remove Users from Groups in Windows 10 OPTION ONE Add or Remove Users from Groups in Windows 10
    To Add Groups to Users from Users folder in Local Users and Groups

    Local Users and Groups is only available in the Windows 10 Pro, Enterprise, and Education editions.

    All editions can use Option Five below.


    1. Press the Win+R keys to open Run, type lusrmgr.msc into Run, and click/tap on OK to open Local Users and Groups.

    2. Click/tap on Users in the left pane of Local Users and Groups. (see screenshot below step 3)

    3. Right click or press and hold on the user name (ex: "Brink2") you want to add groups to be a member of, and click/tap on Properties. (see screenshot below)

    Name:  lusrmgr_Users_member_of_groups-1.jpg
Views: 41470
Size:  45.2 KB

    4. Click/tap on the Member Of tab, and click/tap on the Add button. (see screenshot below)

    Name:  lusrmgr_Users_add_member_of_groups-2.png
Views: 40917
Size:  20.6 KB

    5. Click/tap on the Advanced button. (see screenshot below)

    Name:  lusrmgr_Users_add_member_of_groups-3.png
Views: 40895
Size:  16.5 KB

    6. Click/tap on the Find Now button, select the name of the group (ex: "Administrators") you want to add, and click/tap on OK. (see screenshot below)

    If you like, you can press and hold the Ctrl key to select more than one group.

    Name:  lusrmgr_Users_add_member_of_groups-4.png
Views: 40962
Size:  61.3 KB

    7. Click/tap on OK. (see screenshot below)

    Name:  lusrmgr_Users_add_member_of_groups-5.png
Views: 40879
Size:  17.4 KB

    8. Click/tap on OK. (see screenshot below)

    Name:  lusrmgr_Users_add_member_of_groups-6.png
Views: 41029
Size:  20.1 KB

    9. When finished, you can close Local Users and Groups if you like.






    Add or Remove Users from Groups in Windows 10 OPTION TWO Add or Remove Users from Groups in Windows 10
    To Remove Groups from Users from Users folder in Local Users and Groups

    Local Users and Groups is only available in the Windows 10 Pro, Enterprise, and Education editions.

    All editions can use Option Six below.


    1. Press the Win+R keys to open Run, type lusrmgr.msc into Run, and click/tap on OK to open Local Users and Groups.

    2. Click/tap on Users in the left pane of Local Users and Groups. (see screenshot below step 3)

    3. Right click or press and hold on the user name (ex: "Brink2") you want to remove groups from, and click/tap on Properties. (see screenshot below)

    Name:  lusrmgr_Users_member_of_groups-1.jpg
Views: 41470
Size:  45.2 KB

    4. Click/tap on the Member Of tab, select the group (ex: "Administrators") you want to remove, and click/tap on the Remove button. (see screenshot below)

    If you like, you can press and hold the Ctrl key to select more than one group.

    Name:  lusrmgr_Users_remove_member_of_groups-2.png
Views: 41069
Size:  24.8 KB

    5. Click/tap on OK. (see screenshot below)

    Name:  lusrmgr_Users_add_member_of_groups-6.png
Views: 41029
Size:  20.1 KB

    6. When finished, you can close Local Users and Groups if you like.






    Add or Remove Users from Groups in Windows 10 OPTION THREE Add or Remove Users from Groups in Windows 10
    To Add Users to Groups from Groups folder in Local Users and Groups

    Local Users and Groups is only available in the Windows 10 Pro, Enterprise, and Education editions.

    All editions can use Option Five below.

    1. Press the Win+R keys to open Run, type lusrmgr.msc into Run, and click/tap on OK to open Local Users and Groups.

    2. Click/tap on Groups in the left pane of Local Users and Groups. (see screenshot below step 3)

    3. Right click or press and hold on the group name (ex: "Administrators") you want to add users as members of, and click/tap on Properties. (see screenshot below)

    Click image for larger version. 

Name:	lusrmgr_Groups_Add_members-1.jpg 
Views:	427 
Size:	118.9 KB 
ID:	142141

    4. Click/tap on the Add button. (see screenshot below)

    Name:  lusrmgr_Groups_Add_members-2.png
Views: 41153
Size:  24.1 KB

    5. Click/tap on the Advanced button. (see screenshot below)

    Name:  lusrmgr_Groups_Add_members-3.png
Views: 41133
Size:  16.7 KB

    6. Click/tap on the Find Now button, select the name of the user account (ex: "Brink2") you want to add as a member, and click/tap on OK. (see screenshot below)

    If you like, you can press and hold the Ctrl key to select more than one user.

    Name:  lusrmgr_Groups_Add_members-4.jpg
Views: 40925
Size:  83.6 KB

    7. Click/tap on OK. (see screenshot below)

    Name:  lusrmgr_Groups_Add_members-5.png
Views: 40865
Size:  17.6 KB

    8. Click/tap on OK. (see screenshot below)

    Name:  lusrmgr_Groups_Add_members-6.png
Views: 40996
Size:  25.2 KB

    9. When finished, you can close Local Users and Groups if you like.






    Add or Remove Users from Groups in Windows 10 OPTION FOUR Add or Remove Users from Groups in Windows 10
    To Remove Users from Groups from Groups folder in Local Users and Groups

    Local Users and Groups is only available in the Windows 10 Pro, Enterprise, and Education editions.

    All editions can use Option Six below.


    1. Press the Win+R keys to open Run, type lusrmgr.msc into Run, and click/tap on OK to open Local Users and Groups.

    2. Click/tap on Groups in the left pane of Local Users and Groups. (see screenshot below step 3)

    3. Right click or press and hold on the group name (ex: "Administrators") you want to remove users as members of, and click/tap on Properties. (see screenshot below)

    Click image for larger version. 

Name:	lusrmgr_Groups_Add_members-1.jpg 
Views:	427 
Size:	118.9 KB 
ID:	142141

    4. Select a user name (ex: "Brink2") you want to remove as a member, and click/tap on the Remove button. (see screenshot below)

    If you like, you can press and hold the Ctrl key to select more than one user.

    Name:  lusrmgr_Groups_Remove_members-2.png
Views: 41083
Size:  29.0 KB

    5. Click/tap on OK. (see screenshot below)

    Name:  lusrmgr_Groups_Remove_members-3.png
Views: 40886
Size:  24.0 KB

    6. When finished, you can close Local Users and Groups if you like.






    Add or Remove Users from Groups in Windows 10 OPTION FIVE Add or Remove Users from Groups in Windows 10
    To Add User to Group in Command Prompt

    1. Open an elevated command prompt.

    2. Type the command below into the elevated command prompt, and press Enter. (see screenshot below)

    net localgroup "Group" "User" /add

    Substitute Group in the command above with the actual name of the group (ex: "Administrators") you want the user to be a member of.

    Substitute User in the command above with the actual name of the user account (ex: "Brink2") you want to be a member of the group.

    For example: net localgroup "Administrators" "Brink2" /add

    3. When finished, you can close the elevated command prompt if you like.

    Name:  Add_user_as_member_of_group_command.jpg
Views: 40908
Size:  39.3 KB






    Add or Remove Users from Groups in Windows 10 OPTION SIX Add or Remove Users from Groups in Windows 10
    To Remove User from Group in Command Prompt

    1. Open an elevated command prompt.

    2. Type the command below into the elevated command prompt, and press Enter. (see screenshot below)

    net localgroup "Group" "User" /delete

    Substitute Group in the command above with the actual name of the group (ex: "Administrators") you want the user to no longer be a member of.

    Substitute User in the command above with the actual name of the user account (ex: "Brink2") you want to no longer be a member of the group.

    For example: net localgroup "Administrators" "Brink2" /delete

    3. When finished, you can close the elevated command prompt if you like.

    Name:  Remove_user_as_member_of_group_command.jpg
Views: 40888
Size:  39.4 KB






    Add or Remove Users from Groups in Windows 10 OPTION SEVEN Add or Remove Users from Groups in Windows 10
    To Add User to Group in PowerShell

    For more Add-LocalGroupMember command options and details, see: Add-LocalGroupMember - Microsoft Docs

    1. Open an elevated PowerShell.

    2. Type the command below into the elevated PowerShell, and press Enter. (see screenshot below)

    Add-LocalGroupMember -Group "Group" -Member "User"

    Substitute Group in the command above with the actual name of the group (ex: "Administrators") you want the user to be a member of.

    Substitute User in the command above with the actual name of the user account (ex: "Brink2") you want to be a member of the group.

    For example: Add-LocalGroupMember -Group "Administrators" -Member "Brink2"

    3. When finished, you can close the elevated PowerShell if you like.

    Click image for larger version. 

Name:	Add_user_to_group_in_PowerShell.png 
Views:	285 
Size:	19.6 KB 
ID:	144047






    Add or Remove Users from Groups in Windows 10 OPTION EIGHT Add or Remove Users from Groups in Windows 10
    To Remove User from Group in PowerShell

    For more Remove-LocalGroupMember command options and details, see: Remove-LocalGroupMember - Microsoft Docs

    1. Open an elevated PowerShell.

    2. Type the command below into the elevated PowerShell, and press Enter. (see screenshot below)

    Remove-LocalGroupMember -Group "Group" -Member "User"

    Substitute Group in the command above with the actual name of the group (ex: "Administrators") you want the user to no longer be a member of.

    Substitute User in the command above with the actual name of the user account (ex: "Brink2") you want to no longer be a member of the group.

    For example: Remove-LocalGroupMember -Group "Administrators" -Member "Brink2"

    3. When finished, you can close the elevated PowerShell if you like.

    Click image for larger version. 

Name:	Remove_user_from_group_in_PowerShell.png 
Views:	293 
Size:	19.8 KB 
ID:	144048


    That's it,
    Shawn


    Related Tutorials



  1. Posts : 42
    Windows 10 Home Premium v1809 64bit OS Build 17763.615
       #1

    Hi Shawn,
    After a belated upgrade to 1809 ( I had to do it manually as it didn't do it automatically as it normally does), I noticed the following event in the event log which repeatedly occurs. From what the message says it appears that "System" is not authorised to have access. Not wishing to go down the incorrect path, can you advise.
    Thanks.
    Log Name: Application
    Source: Microsoft-Windows-Perflib

    Date: 12/07/2019 10:19:19

    Event ID: 1000 Task Category: None Level: Error Keywords: User: SYSTEM Computer: Home-PC

    Description: Access to performance data was denied to user "SYSTEM" (value from GetUserName() for the running thread) as attempted from module "C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe" (value from GetModuleFileName() for the binary that issued the query).

    Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

    <System> <Provider Name="Microsoft-Windows-Perflib" Guid="{13b197bd-7cee-4b4e-8dd0-59314ce374ce}" />

    <EventID>1000</EventID> <Version>1</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2019-07-12T09:19:19.616243700Z" />

    <EventRecordID>3272</EventRecordID> <Correlation />

    <Execution ProcessID="2480" ThreadID="3136" />

    <Channel>Application</Channel> <Computer>Home-PC</Computer> <Security UserID="S-1-5-18" />

    </System> <EventData> <Data Name="User">SYSTEM</Data>

    <Data Name="Module">C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe</Data>

    </EventData>
    </Event>
      My ComputerSystem Spec

  2. Brink's Avatar
    Posts : 41,512
    64-bit Windows 10 Pro build 18965
    Thread Starter
       #2

    Hello @parsonm,

    If you're not having any issues using VMware Player, I wouldn't worry about it.
      My ComputersSystem Spec

  3. Bree's Avatar
    Posts : 12,027
    10 Home x64 (1903) (10 Pro on 2nd pc)
       #3

    Note   Note
    Local Users and Groups is only available in the Windows 10 Pro, Enterprise, and Education editions.
    All editions can use Option Five below.


    For Windows 10 Home users who don't feel confident using a command prompt there is another option. Run Netplwiz, select a user then click Properties. You can change their group membership there too.

    Click image for larger version. 

Name:	image.png 
Views:	46 
Size:	48.4 KB 
ID:	239992
      My ComputersSystem Spec

  4. Brink's Avatar
    Posts : 41,512
    64-bit Windows 10 Pro build 18965
    Thread Starter
       #4
      My ComputersSystem Spec


  5. Posts : 42
    Windows 10 Home Premium v1809 64bit OS Build 17763.615
       #5

    Thank you for your responses and information.
    I have run Netplwiz and have the following in the usernames:- Administrator, HomeGroupUser$ and the three user names of the people that use this PC. Under the "Group" heading they all have HomeUsers and in addition the other two users have "Users". I have instead "Administrators" which is also associated with the Administrator username.
    So, relating to the error above, what if anything am I missing or is incorrect in the user accounts? Sorry for being a bit dumb here but lack of knowledge on this is making me wary of moving forward without understanding what I am doing.
      My ComputerSystem Spec

  6. Brink's Avatar
    Posts : 41,512
    64-bit Windows 10 Pro build 18965
    Thread Starter
       #6

    parsonm said: View Post
    Thank you for your responses and information.
    I have run Netplwiz and have the following in the usernames:- Administrator, HomeGroupUser$ and the three user names of the people that use this PC. Under the "Group" heading they all have HomeUsers and in addition the other two users have "Users". I have instead "Administrators" which is also associated with the Administrator username.
    So, relating to the error above, what if anything am I missing or is incorrect in the user accounts? Sorry for being a bit dumb here but lack of knowledge on this is making me wary of moving forward without understanding what I am doing.

    Are you having any issues with VMware Player?

    The error is for System being denied access to the "C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe" file.

    I would also recommend to report the full error message to vmware support to see if they may have a fix for it in the next update.
      My ComputersSystem Spec



  7. Posts : 42
    Windows 10 Home Premium v1809 64bit OS Build 17763.615
       #7

    OK Shawn, thank you, I will report it. As far as I am aware the VMware Player is running OK but as this happened after the last VMware update it does look suspicious.
      My ComputerSystem Spec

  8. Brink's Avatar
    Posts : 41,512
    64-bit Windows 10 Pro build 18965
    Thread Starter
       #8

    parsonm said: View Post
    OK Shawn, thank you, I will report it. As far as I am aware the VMware Player is running OK but as this happened after the last VMware update it does look suspicious.

    Please let us know how it goes.
      My ComputersSystem Spec


 

Tutorial Categories

Add or Remove Users from Groups in Windows 10 Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Mixed Reality Phone


Related Threads
I have limited space on my start menu and would like to take up all of it with icons. I do not need nor want to group the icons and create blank space between them. I want to use that space. But it seems impossible to have no groups or just one....
Solved No users visible in Local Users and Groups in User Accounts and Family Safety
After forgetting the local administrator password, I followed that guide for offline editing the SAM registry file. This clearly caused a problem, because no I see no users in LUAG as per the attached. All the accounts work fine, except the built-in...
Hi I have Windows 10 v1511 Enterprise 64 bit. From the Command Prompt, run as administrator, how should I do to remove any TrustedInstaller or Authenticated Users or System users from the ACLs of an entire directory structure also contains...
Solved Show Local users and Groups in User Accounts and Family Safety
Hello, I want to get a list of Local Users and Groups as shown in the first screen shot (taken from the Web). When I run Computer Management as administrator that information is not available under Computer Management > System Tools (second...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 23:49.
Find Us