Search notes:

Windows: groups

Checking memberships in groups

Which groups a user is part of can be checked in a console application (such as cmd.exe or PowerShell with
whoami.exe /groups
In PowerShell, it is additionally possible with
[System.Security.Principal.WindowsIdentity]::GetCurrent().groups

Listing groups

Command line

c:\> wmic group where "localAccount='true'" get caption, SID, status
Caption                                              SID                                    Status
TESTPC\Access Control Assistance Operators  S-1-5-32-579                                    OK
TESTPC\Administrators                       S-1-5-32-544                                    OK
TESTPC\Backup Operators                     S-1-5-32-551                                    OK
TESTPC\Cryptographic Operators              S-1-5-32-569                                    OK
TESTPC\Device Owners                        S-1-5-32-583                                    OK
TESTPC\Distributed COM Users                S-1-5-32-562                                    OK
TESTPC\Event Log Readers                    S-1-5-32-573                                    OK
TESTPC\Guests                               S-1-5-32-546                                    OK
TESTPC\Hyper-V Administrators               S-1-5-32-578                                    OK
TESTPC\IIS_IUSRS                            S-1-5-32-568                                    OK
TESTPC\Network Configuration Operators      S-1-5-32-556                                    OK
TESTPC\Performance Log Users                S-1-5-32-559                                    OK
TESTPC\Performance Monitor Users            S-1-5-32-558                                    OK
TESTPC\Power Users                          S-1-5-32-547                                    OK
TESTPC\Remote Desktop Users                 S-1-5-32-555                                    OK
TESTPC\Remote Management Users              S-1-5-32-580                                    OK
TESTPC\Replicator                           S-1-5-32-552                                    OK
TESTPC\System Managed Accounts Group        S-1-5-32-581                                    OK
TESTPC\Users                                S-1-5-32-545                                    OK
TESTPC\docker-users                         S-1-5-21-1986187950-1154198019-2155599821-1002  OK

GUI

Local groups (and users) can be viewed with lusrmgr.msc

See also

The SQL Server function is_member() can be used to determine if an SQL Server login belongs to a given Windows group.
Netplwiz.exe
The .NET class System.Security.Principal.NTAccount

Index