Today is the second time I’ve been looking for the User template because I needed to add a field. This will probably happen again, but next time I have this blog post (HA!):

The User template is located in the Core database at /sitecore/templates/System/Security/User.