What is a local account?

A local account is like a network account (e.g., your Indiana University Network ID), except that a local account only controls access to one single, physical computer. Your local account credentials (username, password, and SID/UID) are stored locally on the computer's hard drive, and the computer checks its own files to authenticate your login. Local accounts are different from network domain accounts. Network domain accounts are created and stored on network servers (sometimes called domain controllers), and computers query the server to give network access to those eligible for it.

A local account allows you some level of access to an individual computer and that computer's hard drive. The local account's settings determine your rights for running programs, installing and removing programs, accessing files, and enabling or disabling services.

Also see:

• In Active Directory, what are the differences between universal, global, and domain local groups?
• In Windows 2000, why can't I remove an ADS user account from a local group?
• In Windows NT, 2000, and XP, what is the SID (security identifier)?
• What are the default Windows XP local account groups?