Table of contents
Collapse the table of content
Expand the table of content


Last Updated: 12/12/2016

Group specifies the local security group to which the domain account or the security group will be added. You can add a user to multiple groups by entering multiple group names separated by semicolons.

The Microsoft-Windows-Shell-Setup component recognizes the following English group names and sets the appropriate localized group name, regardless of the default language of the Windows image:

  • AccountOperators

  • Administrators

  • BackupOperators

  • Guests

  • PowerUsers

  • PrintOperators

  • Replicator

  • SystemOperators

  • Users

Specify the account names and group names by using language-neutral names. The language-neutral account and group names are specified in English—for example, Administrators, Power Users, and Guest. This is required because the shell account settings are processed before a default user interface (UI) language is applied to the computer.



Specifies the local security group to which the domain account or the security group will be added. More than one group can be specified (separated by semicolons). Group_name is a string with a maximum length of 256 characters.

This string type supports empty elements.

Valid Passes


Parent Hierarchy

Microsoft-Windows-Shell-Setup | OfflineUserAccounts | OfflineDomainAccounts | OfflineDomainAccount | Group

Applies To

Windows 10 for desktop editions (Home, Pro, Enterprise, and Education)

Windows Server 2016

For a list of the supported Windows editions and architectures that this component supports, see Microsoft-Windows-Shell-Setup.

XML Example

The following XML examples show how to use the Group setting to add domain groups to local security groups.

Example 1:

      <OfflineDomainAccount wcm:action="add">
        <Name>Domain Users</Name> 

Example 2:

      <OfflineDomainAccount wcm:action="add">
        <Name>Domain Administrators</Name> 

Send comments about this topic to Microsoft

© 2017 Microsoft