Groups help control permissions than setting individual user permissions.
To create a new group, Start > lusrmgr.sm > Groups > New group
Default Groups
Members of the administrator group have full access to the computer to access all file and change system settings.
Members of the users group have standard privileges, like running applications.
Members of the remote desktop users group are able to connect remotely.
Members of the guest group do not have permanent profiles.