Windows XP Service Pack 2 Support Tools

The Windows Support Tools for Microsoft Windows XP are intended for use in diagnosing and resolving computer problems.


One of these tools is whomai, a tool which when run with the /groups switch can be used to display all the groups in the currently logged on user token as shown in the following command and output:

whoami /groups

[Group 1] = “MYDOMAIN\Domain Users”
[Group 2] = “Everyone”
[Group 3] = “MYPC\Debugger Users”
[Group 4] = “BUILTIN\Users”
[Group 5] = “BUILTIN\Administrators”
[Group 7] = “NT AUTHORITY\Authenticated Users”
[Group 8] = “LOCAL”
[Group 9] = “MYDOMAIN\Domain Admins”
[Group 10] = “MYDOMAIN\Enterprise Admins”

In this example, my user account is a member of the Domain and
Enterprise Admin groups as well as all the other displayed groups. You
can use this same command to determine the group membership for the
local computer account. To do so, start a command session under the
system context, which you do by using the scheduler to start a command
session 1 minute in the future, as the following command shows:

<1 minute in future> /inter cmd.exe

When the new command session starts, run the whoami /groups command to
show the groups that the computer account is a member of, as this
example shows:

C:\WINDOWS\system32>whoami /groups

[Group 1] = “BUILTIN\Administrators”
[Group 2] = “Everyone”
[Group 3] = “NT AUTHORITY\Authenticated Users”

Notice that the computer account is a member of the Authenticated Users
group, which you might not have expected.


Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: