Thursday 08 October 2026 11:40:36 GMT+02:00

Netcrook

HomeManifesto
News
Techcrook
Geocrook
WikicrookTeamAppContact
EnglishItaliano

WIKICROOK

Administrators group

A privileged group whose membership typically grants high-level control over the identity system.

The administrators group is a privileged identity group in a directory or domain service. Membership usually grants the highest practical level of control: creating and deleting users, changing policies, resetting credentials, managing trusts, and altering security settings. In many environments, access to this group is the difference between an ordinary account and full administrative authority.

In cyber security, this group matters because attackers often target it instead of individual systems. If they can add an account to the administrators group, they can often take over the identity platform and every service that depends on it. Defenders should treat group membership as a critical security boundary, enforce least privilege, require strong approval paths for changes, and monitor for unexpected additions or nested group abuse. Alerts around admin-group changes are often one of the earliest signs of directory compromise.

← WIKICROOK index