regf ] ] 0\SystemRoot\System32\Config\SAM5ԛGG:n5ԛGG:n5ԛGG:nrmtmj ^OfRgôhbinnk,~ ]hPpROOTnk a# 8L&SAMskppdHX4?  lhx@8skx !? ?? nk ~ ]x RXACTvk vkCD0l1? 81 ޢ(g!>ү]y)'V حfh*  7nk ]x`#`Domainsvkn vknk ܚԑ pBuiltinx#% vkpF ]@vk xV D0zl 8 ޢ(g!>ү]y)'V حfh*   Xnk ]Xph Users vknk ]Nameslh|vknk ]X  Groupsvk vknk ]Nameslh( |vknk Q ]XQ( Aliaseslh BO.k nk U % FNames( vk nk z G hMembers @*xvknk SU0 p:Administrators85Rvkqnk SU0  Usersnk Q7' Plesk Administrator0 vk@jV5wjد XX *vkVnk 78  00000220vkXXjC X%ȨvkCnk <8' psaadmvk5#vkPWF 4l{8nk _&$000003EA_^:x%^avvkaVd u/vktForcePasswordResetputnk Ncّ) /)S-1-5-21-1760826003-3208131187-2192253803lhnjvk Phbinnk eno  h00000221vkh8Cvk&vk vk'vk(vk+1HQnk U0 #Access Control Assistance OperatorslicatxQnk U0 (System Managed Accounts Groupe DvkEvkForcePasswordResetnk .8@000001F4vk!nk U0 6Hyper-V AdministratorsDnk .8000001F5vkEjnk .  X00000222vk|hjC~yjvk"" D0   $ #8  ޢ(g!>ү]y)'V حfh*  GuestsGuests have the same access as members of the Users group by default, except for the Guest account which is further restrictedhs28k#nk U0 SNetwork Configuration Operatorsj+ `nk eno X)S-1-5-21-1760826003-3208131187-2192253803@nk . 00000245vk8C(E:$`D0   $8  ޢ(g!>ү]y)'V حfh*  System Managed Accounts GroupeMembers of this group are managed by the system.hs28k#nk .8p000001F7vkVvkx2-"C?mnk ] 00000227vk0C' D0l  8  ޢ(g!>ү]y)'V حfh*  Backup OperatorsBackup Operators can override security restrictions for the sole purpose of backing up or restoring filesovkjlh2JxvkForcePasswordResetministvk nk ] 8|00000228vk4BjC~yj.vk,|jC X%@(JHD0   $8  ޢ(g!>ү]y)'V حfh*  ReplicatorSupports file replication in a domain 'hbin nk U0  Power Usersnk ] 00000223vk C#D0   $ #8  ޢ(g!>ү]y)'V حfh*  Power UsersaPower Users are included for backwards compatibility and possess limited administrative powersnk f_)Accountlh#5X vkp#F ] p0 ȘbA燍l_"beK\g&%Xh:uyܸʝ\i8΂{9]]*K\\4{y%l l$UHayCp0 ʙMVֶ|ٖ;5ROVT8,$k<^(NAif]1Uj h7_hݠw# awgzܨvkpVnk U0 4RDS Remote Access Servers(lh \ @ _xK VPPmUHܘ8Q'7Kt9bB;x:U+/C I886K#84>81O  0FMV/d HW׈0%u=#0LԃmxX*\-"Pn?m k  vkJx&nk ܚԑ#~Users((vknk k,;&0'(Names,X-vk'nk ]#+&Groupsvk vknk fV'P&Names0+vknk r2# ()Aliaseslh(B'O.&k 'nk r2( )VNames(*vk)nk t)\(O)hMembersvkvkvk"nk U0 ) Replicatornk ܚԑ'(|00000201lh*3yj((|vk| Cnk `c_&($000003E8vkP+Fu_f_`c_?nk 788000003E8nk fV'& Administrator //vknk ^_&$000001F4vkvkP-F喝_=ѹn^_J889vkVlh?bnk &980)8 psaadm_usersXZ/51vknk $_&,000001F5vkj.ȮvkP@/F$_vk=VvkP5#F91vkPp5Fhbin0 nk SU0 (Print Operators6vk2vkHC0FM0(0`Hnk " ] 00000226nk U0 Performance Monitor Usersratorsvk.nk " ] 820000022Bvk@@fCh*26vk9H2h9@&~D0   $8  ޢ(g!>ү]y)'V حfh*  Print OperatorsMembers can administer printers installed on domain controllersnk U0 0Performance Log Usersser7H`Qnk fV'x'DefaultAccountnk 蕨8_&x.000001F7蕨8_vk:Vnk " ] `240000022C(Qnk Q ] 60000023EvkZjCyj69vk/vk8vk=vk?g QH:nk z `,0000022Enk U0 0Distributed COM Users lh̃(EC@8fn eratLOnk U0 @2 IIS_IUSRSnk U0 h2Cryptographic Operatorsnk U0 Event Log Readersvk@vkBnk fV'p'Guestknk fV((87Nonevk:Fnk SU0  Guestsvk4>FP  ((Jttttttttt|D0D[  $8 ޢ(g!>ү]y)'V حfh*$Dhs28k#  DefaultAccountA user account managed by the system.k^qphpd.@lR${n,TŘe, W[%4/2dQ՚` pdddddddddlD0D  $8 ޢ(g!>ү]y)'V حfh*  GuestBuilt-in account for guest access to the computer/domainx=VñƳ,1 L:8:_T(5ܝ[8+(zD0   $8  ޢ(g!>ү]y)'V حfh*  Remote Desktop UsersMembers in this group are granted the right to logon remotely,>(D0   $8  ޢ(g!>ү]y)'V حfh*  Network Configuration OperatorsMembers in this group can have some administrative privileges to manage configuration of networking featuresnk Q ] R40000023Fvk4 `MC1ԃvk  nk " ] 00000022Fnk s#x0LastSkuUpgrade GRxnk z xF`:4S-1-5-80-2424422309-1933125734-3147957018-2104698747nk zEh:D1002648lh FVvk.vknk czE9E24D1C2lhF>[vkoxnk a+&)HG3S-1-5-80-2707368164-2790831021-2181136863-982273629vkGlh Oji 8ү]y)'V حfh*  Performance Log UsersMembers of this group may schedule logging of performance counters, enable trace providers, and collect event traces both locally and via remote access to this computernk U0 Backup Operatorsnk ~X}i 400000238nk U0 *Remote Desktop UsersorsvkS COM  P2*D0   $8  ޢ(g!>ү]y)'V حfh*  Distributed COM UsersMembers are allowed to launch, activate and use Distributed COM objects on this machine.nk " ] (800000239nk ~X}i u08S-1-5vk0vklhji HvkAvkCvkDrvvkFvk(lh |yj }yj~yj yj0yjyjyj1yj5yj@7yjDyjHyjKyjNyjPyjH6yj@DyjVyjYyjpZyj _yjmyjyjHqyj X%0 |vk#DvkXdpCogrvk,tR89.vD0   $8  ޢ(g!>ү]y)'V حfh*  Cryptographic OperatorsMembers are authorized to perform cryptographic operations.P8jhD0   $8  ޢ(g!>ү]y)'V حfh*  IIS_IUSRSBuilt-in group used by Internet Information Services.nk U0 p2RDS Endpoint Serversnk Q ] E00000240nk U0 4RDS Management ServersnvkhrC@=" xD0   $8  ޢ(g!>ү]y)'V حfh*  Event Log ReadersMembers of this group can read event logs from local machinenk Q ] H00000241Qvk\ CvkvkvkUserPasswordHintdsz)nk Q ] Z00000242vkkrCccZ>>(D0   $8  ޢ(g!>ү]y)'V حfh*  Certificate Service DCOM AccessMembers of this group are allowed to connect to Certification Authorities in the enterprisevkvkPFvk,0VvkvkPFvk,Vhskp !? ??8 1?lcLү]y)'V حfh*  RDS Remote Access ServersServers in this group enable users of RemoteApp programs and personal virtual desktops access to these resources. In Internet-facing deployments, these servers are typically deployed in an edge network. This group needs to be populated on servers running RD Connection Broker. RD Gateway servers and RD Web Access servers used in the deployment need to be in this group.P@(hxD0   $8  ޢ(g!>ү]y)'V حfh*  RDS Endpoint ServersServers in this group run virtual machines and host sessions where users RemoteApp programs and personal virtual desktops run. This group needs to be populated on servers running RD Connection Broker. RD Session Host servers and RD Virtualization Host servers used in the deployment need to be in this group.xA,8LD0   $8  ޢ(g!>ү]y)'V حfh*  RDS Management ServersServers in this group can perform routine administrative actions on servers running Remote Desktop Services. This group needs to be populated on all servers in a Remote Desktop Services deployment. The servers running the RDS Central Management service must be included in this group.B,D0   $8  ޢ(g!>ү]y)'V حfh*  Hyper-V AdministratorsMembers of this group have complete and unrestricted access to all features of Hyper-V.nk U0 07Remote Management Usersnk Q ] _00000244nk U0 nStorage Replica AdministratorsCQvkvcC OpnrCF0D0   $8  ޢ(g!>ү]y)'V حfh*  Access Control Assistance OperatorsMembers of this group can remotely query authorization attributes and permissions for resources on this computer.nk Q ] n00000246nk nC] On00000004vk!jvk!nk nC] O 0000000BvkD.D0   $8  ޢ(g!>ү]y)'V حfh*  Remote Management UsersMembers of this group can access WMI resources over management protocols (such as WS-Management via the Windows Remote Management service). This applies only to WMI namespaces that grant access to the user.lhqnj(rnjOnj$nk 8o'p IME_ADMINnk Ԧy_&v$000003F8Lm_c/Ԧy_plyvk!F<$D0   $8  ޢ(g!>ү]y)'V حfh*  Storage Replica AdministratorsMembers of this group have complete and unrestricted access to all features of Storage Replica.vkForcePasswordResetnk eno8000003F8xnk B.g `X2S-1-5-80-3509227226-3262999478-701501521-735039873nk B.gyz30B5D8BCvk.fpzxnk c)G:3S-1-5-82-1784014690-2312602118-3509420860-501035247nk b9)H000003FAnk ҚO)0)MSFTP7_062424381nk b9)(P000003FCnk V)'XMSFTP7_062424353vk0.2@D0   $8  ޢ(g!>ү]y)'V حfh*  Performance Monitor UsersMembers of this group can access performance counter data locally and remotelyPڎ*Ѷk}Q)+ص0Pf(9s{'s}H&(lh- wj. wj5wjP+j8jjjjj`jjjjvjʁj́j`ρjhjj0j'|nk z_&X$,00000403hbin ,(D0   $8  ޢ(g!>ү]y)'V حfh*  KAVWSEE AdministratorsUsers in this group can manage all the components and features of Kaspersky Security 10.1.2 for Windows Server, both locally and remotely.z_^Jvk8l||||||||D0D[ 8 ޢ(g!>ү]y)'V حfh*$Dhs28k#  AdministratorBuilt-in account for administering the computer/domainJ oM vo=;I.mV]m֢^ߒ>]w=/TMuwbR-]B?@ЫT)     "D"hl88D0D  $8 ޢ(g!>ү]y)'V حfh*$hs28k#  zenjex_ftpPlesk Domain User\Plesk Domain User\ PCtxCfgPresent551e0bb0CtxCfgFlags100f02190CtxShadow01000000*CtxMinEncryptionLevel01C:\Inetpub\vhosts\zenjex.com".,? B *wl)Yinw^N)'ދܿ,ʽO?ɁѦۏ-j3xрuaWO{pl||||||||8D0D[ 8 ޢ(g!>ү]y)'V حfh*$Dhs28k#  AdministratorBuilt-in account for administering the computer/domainJVmla1k=;I.mV]6As;@#ԝ&Y"'eV O**f6yZ/BJi=rHwbR-]B?@ЫT) &C0g:y։q#r%k3w:10.pfD0o}_B&CX8.hbindD0L  $  NoneOrdinary users 8D0l  8  ޢ(g!>ү]y)'V حfh*  AdministratorsAdministrators have complete and unrestricted access to the computer/domainhs28k#hs28k#stnk t)\(000003E9vkCK&6T68D0D$hs28k#8 ޢ(g!>ү]y)'V حfh*   Plesk AdministratorPlesk Administrator accountbPlesk Administrator accountbү]y)'V حfh*  psamailfilter_usersPlesk Mail Filter usersnk :0)HpsaclnP@   &@&hhhhhhhhp8D0D  $8 ޢ(g!>ү]y)'V حfh*$hs28k#  psaadmPlesk admin accountPlesk admin accountؽ6DH,0 x clKeX7/!'9&px{KCP;\| i`bWVf&tnk Ncّ(000003ECvkjحvkP%F)|nk >d:0)/psaservnk Q(/000003EDvk@C8 vk үV]y)vkForcePasswordReset nk JH@000003F0vkjvkvkvkP0Fhbin*&<D0   $8  ޢ(g!>ү]y)'V حfh*  Parallels Panel usersPlesk hosting usersnk ؉:'IUSRPLESK_hordenk 0^& $000003F1vkPjF5wjxP vkj@vklForcePasswordResetng 8ؾnk :0)8ftp_subaccountsvkTvk@!TCj(hnk :(@`000003EEvk`Cvknk e:' IUSRPLESK_atmailnk _&$000003F6(nk Z~^&$000003F2vkVlesvkcnk ':0)صPP_WPGnk ':(\000003EFjZ؂ ]@]hvkjForcePasswordReset|vk\XaCcou$,D0   $8  ޢ(g!>ү]y)'V حfh*  ftp_subaccountsPlesk FTP accountsnk ':'IWAM_plesk(default)nk 'g_&H$000003F0#~`J'g_ 4(D0   $8  ޢ(g!>ү]y)'V حfh*  PP_WPGPlesk Worker Process Groupnk DO4(000003FB`]8nk c)H000003FDx]]vkx @k vkForcePasswordReset5a&0^nk ؉:H000003F1vkjnk ^&$000003F3e: ^ vkForcePasswordResetnk N:'IUSRPLESK_smrwebmailicvkؿe:Z~^vkForcePasswordResetnk e:H 000003F2nk jSJ&h$(000003F4vkPFvk(V`hbin  &44F|F84D0D  $8 ޢ(g!>ү]y)'V حfh*$hs28k#  IWAM_plesk(default)Default Plesk application pool user&5Default Plesk application pool user&5|4ZS]#zmΨ;wۤo*&Et>bܙ_y&B$QnX1Mrlclq|Ż4F䆻A`  ,,6d68 D0D  $8 ޢ(g!>ү]y)'V حfh*$hs28k#  IUSRPLESK_hordeIIS Horde anonymous accountH(IIS Horde anonymous accountH(W"IKx{_N+$?jOzE Llj_ϊ(|I0yTl <hb:e]`F(nk >Vl'xIME_USERvknk e㊿_&$000003F7vkP F(g!>үT 9/e㊿_sevknVsxvk!hv0nk e:'0IUSRPLESK_smwebmailvk]vkP`pFxvkVsPp   ,,8d88 D0D  $8 ޢ(g!>ү]y)'V حfh*$hs28k#  IUSRPLESK_atmailIIS ATMail anonymous accountIIS ATMail anonymous accountjkr_k5`c8$"|3uBQҗ%cK"f& UH(.{jmb՜AqN:jSJvkForcePasswordResetnk N:'pIUSRPLESK_sqladminvknk 9/ɹ^&x$ 000003F5plh jjjpjjjjˁj{́j j(j)X%0)|vjʁj́j'|N:9/ɹ^jWqvk Vv2"5  &44BxB8,D0D  $8 ޢ(g!>ү]y)'V حfh*$hs28k#  IUSRPLESK_smwebmailIIS SmarterMail anonymous accountqIIS SmarterMail anonymous accountq^3X(s? S&, Y.T6=}F/8Q#g? r2&7\ OUƦ-vd H @Z3XhvkForcePasswordResetnk :'IWAM_sitepreviewnk t)\F42D0C54vk$ForcePasswordReset!TvkP`F_dLc-^ *vk8hV28k#vkForcePasswordResetRPLnk Q)pS-1-5vkvk  (44PP8,DD0D  $8 ޢ(g!>ү]y)'V حfh*$hs28k#  IUSRPLESK_smrwebmailIIS remote SmarterMail anonymous accountIIS remote SmarterMail anonymous accountb} t-1o{=qKC|&Z^ɰI,fhq<`\.,Q*X,_mGi  $00BtB8(D0D  $8 ޢ(g!>ү]y)'V حfh*$hs28k#  IUSRPLESK_sqladminSQL Admin MSSQL anonymous accountjSQL Admin MSSQL anonymous accountjˀIF#"/z*~Š~fQbg_amG\P8Hkhp%8ٛldPh*J45Q%nk Qش00000011vk`,$DD0   $8  ޢ(g!>ү]y)'V حfh*  psaservPlesk service accountshs28k#hs28k#vkForcePasswordReset/vkPhvѮF%!/Y   ,,DpD8 $D0D  $8 ޢ(g!>ү]y)'V حfh*$hs28k#  IWAM_sitepreviewSite preview application pool userSite preview application pool userEC]"#)+dt*92G ?pgv Vo⺃] \J>qlݫj1> _-OiSnk Xm8x000003F7lh` wjH wjwj ,jHj8yjvkVhbin nk G0)+SQLServer2005SQLBrowserUser$WIN-FABRD4J3F0Rnk +(0000003F9vkxCxnk +)H4S-1-5-80-2488930588-2400869415-1350125619-3751000688invkP FM-nk +80B7DC114vkn vk@lhzhr@V@(h D0   $8  ޢ(g!>ү]y)'V حfh*  SQLServer2005SQLBrowserUser$WIN-FABRD4J3F0RMembers in the group have the required access and privileges to be assigned as the log on account for the associated instance of SQL Server Browser.PZ'\3HyPp} ! PD0   $ #8  ޢ(g!>ү]y)'V حfh*  UsersUsers are prevented from making accidental or intentional system-wide changes and can run most applications hs28k#hs28k#(  ,<hhhhhhhh8D0D[  $8 ޢ(g!>ү]y)'V حfh*$Dhs28k#  IME_USERIME_USERMailEnable IIS Service AccountHG1\W ;'kݱH}6Rhܕ:̛T "LYrA46T h/A/ -fZ8+YƩ5=zA   4J8D0D[  $8 ޢ(g!>ү]y)'V حfh*$Dhs28k#  IME_ADMINIME_ADMIN MailEnable Component Services AccountBY_`fQ/]>$:a]_\O3PsyM(q-KV`dg ;I6W7fDm(7F5]qvPvkvkvksznk CXN_&O$000003FACXN_(CvGYnvkVsaavksForcePasswordResetccovkjvkxnk t)\).@4S-1-5-80-3413349678-4000090317-2793681897-4248338492vknk r20)Hpsamailfilter_usersvknk r2(`t00000406Added Yearp--0@ZP(_X߁]N:t]`nk ү]y)'V حfh*  psaadm_usersPlesk admin accountshs28k#RbUj׉<-0$P(_X߁]N:t]P.s͈l3<8T - skp !? ??8 1?lcLү]y)'V حfh*  psaclnPlesk hosting accountshs28k#hs28k#hs28k#hs28k#hs28k#hs28k#hW'mEw2&*FBCja-sK&ү]y)'V حfh*  IWPG_ggfnzdszPlesk IIS Application Pools Grouphs28k#hs28k#vk3  x8D0   $8  ޢ(g!>ү]y)'V حfh*  MSFTP7_062424381Users of this group have access to FTP server 103.212.120.94hs28k#hs28k#lh pj8jjj{ʁj0́j@ρjjjjhbin H   ,,||$$6\\\\\\d|8D0D  $8 ޢ(g!>ү]y)'V حfh*$hs28k#  MSFTP7_062424353User account for anonymous access to FTP server 103.212.120.94User account for anonymous access to FTP server 103.212.120.94C:\Inetpub\vhosts\Servers\8B9t_odk˓>(H&z-f~c`Q5<$f\ĺ#(i+q'_ķ[{pү]y)'V حfh*P #P #  hs28k#nk a+&8GHD55D74E7Pnk %]^_&$,00000400%]^_*{ nk '*H00000400nk .L4'O zenjex_ftp nk Xm9'HIWPD_2(zenjex_ftp)cLү]y)'V حfh*$hs28k#  IWPD_3(zenjex_ftp)Plesk IIS Worker Process Identity AccountPlesk IIS Worker Process Identity Account·IEc0{.c1Yb\TceaA@wۺ-xT  xY|^ۄ|{*zeQA BLpD0   $8  ޢ(g!>ү]y)'V حfh*  IWPG_zenjex_ftplPlesk IIS Application Pools Grouphs28k#hs28k#hs28k#hs28k#dsnk k,;'8IWPD_6(zenjex_ftp)B de  $00RR80HD0D  $8 ޢ(g!>ү]y)'V حfh*$hs28k#  IWPD_4(zenjex_ftp)Plesk IIS Worker Process Identity AccountPlesk IIS Worker Process Identity Accountɦ T>2qF'6X&QYiΟ2fɪZr:|Ј-)Eg5$heDECr5-  $00RR80HD0D  $8 ޢ(g!>ү]y)'V حfh*$hs28k#  IWPD_2(zenjex_ftp)Plesk IIS Worker Process Identity AccountPlesk IIS Worker Process Identity AccountqNgLMKjȹd=3(h(ߺ)B,B^g l@z*{dwb7  gtJsU#xc7vwPJ  $00RR80HD0D  $8 ޢ(g!>ү]y)'V حfh*$hs28k#  IWPD_6(zenjex_ftp)Plesk IIS Worker Process Identity AccountPlesk IIS Worker Process Identity AccountQ za>=Z)7*z/0ъeCS`Ȧ|1RC ] @3/+z>^`-m}=뽅8Ledi)\[3l||||||||<TD0D[ 8 ޢ(g!>ү]y)'V حfh*$Dhs28k#  AdministratorBuilt-in account for administering the computer/domainJ<}OI%c*qj=;I.mV]6As;@#ԝ&Y~$lnq~|Hdi܁bÅgVwbR-]B?@ЫT) &C0g:y։q#r%k3w:10hbin skp !? ??8 1?lcL