CA Client Automation

  • 1.  query to find local admin

    Posted Nov 23, 2015 06:10 AM

    Hi

         Someone help me in finding the list of domain users who are part of local admin. Is there anyway to retrieve the local admin users info?



  • 2.  Re: query to find local admin
    Best Answer

    Posted Nov 23, 2015 06:31 AM

    Hi,

    You can do this via the reporting function, you would need to have the 'User Account Inventory' enabled under your hardware Inventory configuration and collect that information as an engine task, once that is enabled and collected you can use DSM reporter to report on 'Local Groups > Administrators Members'.

     

    Ian



  • 3.  Re: query to find local admin

    Posted Nov 23, 2015 11:27 AM
      |   view attached

    The data for local groups includes its members listed as comma separated values in one field. This field has a limitation in length, so it may happen that not all members are listed. A “+” sign at the end indicates that the string has been truncated. I had this problem and created a vbs script to get the members in one table list. The script is put into an inventory task of type “external utility”. When the task is executed at the agent, it collects the data and creates a “mif”-file in the ITCM data directory. This file is then converted by the agent to a “mnv”-file and handled as an additional inventory file, which is put to the sector just like the other inventory files. The retrieved data can later be seen in the “Additional” folder of the inventory data of that object in the DSM-explorer. Limitations: The scripts looks for the localised system group name for the windows group sid ="S-1-5-32-544" (“Administrators”) only. It can be copied or enhanced to collect other local groups as well. MIF library functions are taken from other vbs example scripts.

    external utility.jpgtextfile.jpg

    Regards

    Claus

    Attachment(s)

    zip
    getlocalgroup.vbs.txt.zip   1 KB 1 version