When you grant permissions to Principal Self, you grant them to the security principal represented by the object. During an access check, the operating system replaces the SID for Principal Self with the SID for the security principal represented by the object. Authenticated Users A group that includes all users whose identities were authenticated when they logged on. Membership is controlled by the operating system. Terminal Server Users A group that includes all users who have logged on to a Terminal Services server.
Membership is controlled by the operating system.
Local System A service account that is used by the operating system. Administrator A user account for the system administrator. This account is the first account created during operating system installation. The account cannot be deleted or locked out. It is a member of the Administrators group and cannot be removed from that group.