راهنمایی در خصوص دسترسی های یک یوزر در ویندوز سرور 2012

سلام وقت بخیر ، دوستان یه سوال من میخواستم بدونم این دسترسی هایی که برای یک یوزر در اکتیو دایرکتوری ویندوز سرور 2012 داده می شه دقیقا چیکار میکنند ؟

Access Control Assistance Operators

Account Operators

Allowed RODC Password Replication Group

Backup Operators

Cert Publishers

Certificate Service DCOM Access

Cloneable Domain Controllers

Cryptographic Operators

Denied RODC Password Replication Group

Distributed COM Users

DnsAdmins

DnsUpdateProxy

Domain Guests

Domain Admins

Domain Computers

Domain Controllers

Domain Users

Enterprise Admins

Enterprise Read-only Domain Controllers

Event Log Readers

Group Policy Creator Owners

Group Policy Creator Owners

Server Operators

Remote Management Users

Read-only Domain Controllers

RAS and IAS Servers

Pre-Windows 2000 Compatible Access

Performance Monitor Users

Network Configuration Operators

Performance Log Users

Hyper-V Administrators

Access Control Assistance Operators

RDS Remote Access Servers

Remote Desktop Users

RDS Endpoint Servers

Incoming Forest Trust Builders

IIS_IUSRS

Print Operators

RDS Management Servers

Schema Admins

Replicator

Windows Authorization Access Group

Terminal Server License Servers

WinRMRemoteWMIUsers

Users