Windows and the assholes who support special identities which are groups and which the operating system
controls membership you can not view the groups an at least in Active Directory Users and Computers
for example so you can not view or modify the membership of these special identities and or add them
to other groups.
You can however use these groups to assign rights and permissions.
Let's take a look at the most important special identities often called groups for convenience so anonymous
Logan.
This identity represents connections to computer and it's the resources that do not require a user name
and password before Windows Server 2003.
This group was a member of the everyone group beginning with Windows Server 2003.
This group is no longer a default member of the everyone group.
Next one is authenticated users.
This identity represents authenticated identities.
This group does not include the guest account even if it has a password.
Next one is everyone.
This identity includes authenticate it to users and the guest account.
Next one is interactive.
This identity represents users who are accessing a resource while silent in locally to the computer
that is hosting the resource as opposed to accessing their resource or where the network.
When a user accesses and a resource on a computer on which the user has signed in locally the user resided
automatically to the interactive group for the resource.
The interactive identity also includes users who sign in through a remote desktop connection.
Next one is network.
This identity represents users who access a resource over the network as opposed to users who sign in
locally at the computer that is hosting their resource.
When a user accesses any resource or where the network the user reside it automatically to the network
group or that resource.
And finally creator owner this identity represents the security principle that created an object the
creator owner automatically has full control permissions on the object.
By virtue of being the entity that created the object.
Now the importance of these special identities is that you can use them to provide access to resources
based on the type of authentication or connection rather than the user account.
For example you could create a folder on a system that allows users to view its contents when they sign
in locally to the system.
But that does not allow users the same users to view the contents of a mapped drive over the network.
You could achieve this by using and assign and permissions to the interactive special identity.
A common scenario for the creator owner group is when you are set NTFS permissions on a route folder
to allow users to create sub folders such as home directories.
The greater owner group grants users full control permissions on those phone directories because the
user created the sub folder.