A local security group that is removed from an access token. When User Account Control (UAC) creates the filtered access token, the filtered groups are removed.