Object picker UI
Article
Updated: July 3, 2014
Applies To: Windows 8.1, Windows RT 8.1, Windows Server 2012 R2
If you are trying to solve an issue with your personal computer, you should check the help
page at How can we help you?
This topic contains examples of object types that you can select when configuring access to
various types of computer objects (for example, ownership and permissions).
Use the Object Picker control to type the object names that you want to find on the
network or the local computer. You can search for multiple objects by separating each
name with a semicolon. For information about Active Directory objects that you can specify
in this dialog box when your computer is part of a domain, see Active Directory Domain
Services objects later in this topic.
Object Type Details Examples
Built-in Represents default built-in groups and security Users:
security principals.
Administrator
principal
To view built-in principals, type Users on the Start
screen, click Edit local users and groups, and then Guest
double-click Groups or Users.
Groups:
Administrators
Guests
Users
Power Users
Everyone
Object Type Details Examples
Authenticated
Users
Represents a computer's access to network resources.
The computer name was established when the
CarrollB-
Computer operating system was installed. The computer name is
HomeComputer
recorded on the computer information page in
Windows 8.1. To view it, type System on the Start
screen.
Group Can contain users, computers, and other groups as Client operating
members. system groups:
To view these security principals, type Groups on the Administrators
Start screen, click Edit local users and groups, and
then double-click Groups. Users
Power Users
Guests
Server operating
system groups:
Administrators
System Operators
Users
Power Users
Everyone
Object Type Details Examples
Authenticated
Users
Anonymous
Logon
Guests
System
Allows people to access network resources.
To view users who currently have accounts on this CarrollB
Users
local computer, type Users on the Start screen, click
HomeServer\CarrollB
Edit local users and groups, and then double-click
Users.
Locates information about people. Contact objects
cannot be assigned permissions, and therefore, they
do not have access to network resources.
Contact Carroll Blythe
Local Contact objects can be found in the following
directory path on your computer: <drive>\Users\<user
name>\Contacts.
Specific for each
Other Can be created by applications.
instance
Active Directory Domain Services objects
Real-world objects such as users and computers are represented as objects in Active
Directory. And these objects can be contained in other objects called container objects.
Active Directory Domain Services supports numerous object types, and each is represented
by a unique global identifier.
Each object has a set of attributes that best describe it. For example, consider a user object.
Each user can have attributes such as Name, Address, and Telephone number. The objects
that can be authenticated and to which permissions can be assigned are called security
principals. Each security principal object has a security identifier (SID) associated with it, in
addition to the global identifier (GUID).
Object
Details Examples
Type
Users:
Administrator
Cert Publishers
Domain Guests
Guest
Groups:
Built-in
Represents default built-in groups and
security Administrators
security principals.
principal
Server Operators
Print Operators
Users
Hyper-V Administrators
Guests
Represents a work station or a server in a
network. A computer account helps in CarrollB
Computer
authenticating and authorizing its access
CARROLLB.sales.contoso.com
to network resources.
Group Represents a collection of user accounts, Client operating system groups:
computer accounts, contacts, and other
Object
Details Examples
Type
groups that can be managed as a single Administrators
unit. Groups facilitate role-based access to
network resources. There are two types of Users
groups:
Power Users
Security groups are mainly used for
the purpose of providing access to
Guests
network resources.
Distribution groups are not security- Server operating system groups:
enabled and can be used only for
Administrators
communication purposes. Groups
can vary in scope, limiting their
System Operators
membership and scope of operation.
Users
Power Users
Everyone
Authenticated Users
Anonymous Logon
Guests
System
User Represents individuals who need access to CarrollB
the resources in a network. Each user
Contoso\CarrollB
account has a user name and a password.
The purpose behind creating user
accounts is to authenticate the identity of
the user and authorize the user's access to
Object
Details Examples
Type
network resources. Active Directory
supports two types of built-in user
accounts: Administrator and Guest.
Contains the contact information about
people who are associated with the
organization but are not part of it, for
Contact example, contractors or suppliers. A Carroll Blythe
contact object does not have a SID
associated with it, which prevents it from
having access to network resources.
Used to share files across the network. It is
mapped to a file share on a server.
Shared
In Active Directory, published shared <drive>:\Users\CarrollB\Public
folder
folders are located in an organizational
unit.
Printer object naming is
Corresponds to a printer resource in a
organization-specific, for example:
network. Printer objects are listed under
Printer 2012-ColorTone 200 Driver, which is
the Domain Controllers container in Active
a driver associated with Type of
Directory Users and Computers.
Printer.
See also
Security Principals Technical Overview
Security Identifiers Technical Overview
Active Directory Accounts
Active Directory Security Groups
Local Accounts
