A new employee needs to run standard business applications and save files to their workstation, but company policy requires that users cannot install software or change system-wide settings. To which local Windows group should you add the new user's account?