http://myitforum.com/cs2/blogs/dhite/archive/2008/05/18/windows-2003-server-default-domain-local-security-groups.aspx