For example, use the following command to add the Authenticated Users group back to the Built-in Domain Local Users group on a domain controller:
Enterprise Domain Controllers
Terminal Server User
Users become members of these special groups depending on the operation that they are trying to perform. For example, a user gains the Interactive group membership in their token whenever they use a computer locally. The Network group would be added to a user's token anytime that a user connects over the network to a computer.