Authenticated WinGate knows who the user is, because that user has authenticated with WinGate. A user is someone or something that is obtaining some sort of service from WinGate. User records in the database have a number of associated privileges, and also track data about the user's use of WinGate. An integral part of extending the user rules. Groups allow logical groupings of users into groups that share common features.
Groups can have any number of members.
Users can be in any number of groups. Policies Policies have been overhauled. In the early versions of WinGate, rules could be defined on a global level only. Policies are now definable on a per service, per user, per group as well as per time of day, and can also be restricted per request. The Proxy services in WinGate now have their own rule set, as well as being able to use the global rule sets.