FastStart Implementation Guide › Installing CA DLP FastStart › Automatically Created Users and Groups › CA DLP Users and Groups › Top-level Users Group

Top-level Users Group

The following user accounts are created in the top level \Users folder:

Primary Administrator

This is the CA DLP account you created when you installed the FastStart Base Package. This account has full administrative privileges and full management group coverage. The privileges and management group assigned to the Primary Administrator can never be changed. This means it is not possible to withdraw a privilege from this account, or to assign a management group that excludes some groups or users.

ExternalSender

This account has no management or administrative privileges; its sole purpose is as a conduit to enable policy engines to apply policy to external emails.

When you install a CMS, the External Sender setting in the machine policy defaults to this ExternalSender user account.

NT_AUTHORITY\SYSTEM

This account is used by policy engines running as LocalSystem when logging on to the CMS. CA DLP creates this account automatically to streamline the installation process.