<div>
create the share on a server \\server\adminlogs 
copy the below text to a batch file 
run it either as part of a login script or using the at command; 
 
net localgroup administrators &gt;c:\admins.txt 
copy c:\admins.txt \\server\share\adminlogs\%machinename%.txt 
exit 

</div>

<div>
I will give this a shot in the morning an let you know how it goes. thanks!
</div>

<div>
I made a share on serverdc called adminlogs, permissions are wide open on it for now. 
 
I created this: 
 
net localgroup administrators &gt;c:\admins.txt 
copy c:\admins.txt \\serverdc\adminlogs\%machinename%.txt 
exit 
 
and saved it with a .bat ending 
 
When I run it, I get a file called &quot;.txt&quot; in the adminlog folder and it says: 
 
Alias name &nbsp; &nbsp; administrators 
Comment &nbsp; &nbsp; &nbsp; &nbsp;Administrators have complete and unrestricted access to the computer/domain 
 
Members 
 
------------------------------------------------------------------------------- 
administrator 
backup_mail 
****** 
****** 
Domain Admins 
Enterprise Admins 
****** 
****** 
****** 
The command completed successfully. 
 
------------------------------------------------------------------------------- 
 
 
It's not &quot;going out&quot; and querrying clients. 
 
Thanks. 

</div>

<div>
What does running it from the &quot;at&quot; command mean? Would this be able to query everything in the domain? (about 200 machines) 
 
Sorry for my ignorance... I just want to make sure nobody is admin on their machine who isn't supposed to without having to walk around to check it manually or doing it remotely one by one.
</div>

<div>
See if this will help 
 
<a href="http://www.joeware.net/freetools/tools/lg/index.htm" rel="ugc">http://www.joeware.net/freetools/tools/lg/index.htm</a> 

</div>

<div>
Make sure to read the usage 
 
<a href="http://www.joeware.net/freetools/tools/lg/usage.htm" rel="ugc">http://www.joeware.net/freetools/tools/lg/usage.htm</a> 
 
&nbsp; LG Usage lg /? &nbsp;LG V01.02.00cpp Joe Richards (joe@joeware.net) July 2006 
 
Usage: 
&nbsp;LG Group SecPrin [switches] 
 
&nbsp; &nbsp;Group &nbsp; &nbsp; &nbsp; &nbsp; LocalGroup to work with 
&nbsp; &nbsp;Group can be specified in the following ways: 
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; o domain\localgroup 
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; o \\server\localgroup 
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; o localgroup 
 
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; If Group is specified as domain\. or \\server\. 
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; localgroups at that location are enumerated 
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; If Group is specified as . the localgroups on 
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; the local machine are enumerated 
 
 
&nbsp; SecPrin &nbsp; &nbsp; &nbsp; &nbsp;Security Principal to add/remove from group 
 
&nbsp; Switches: (designated by - or /) 
&nbsp; &nbsp;-add &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Add SecPrin to Group. 
&nbsp; &nbsp;-remove &nbsp; &nbsp; &nbsp; Remove SecPrin from Group 
&nbsp; &nbsp;-cleargroup &nbsp; Remove all members from group 
&nbsp; &nbsp;-addgroup &nbsp; &nbsp; Add localgroup specified 
&nbsp; &nbsp;-removegroup &nbsp;Remove localgroup specified 
&nbsp; &nbsp;-sid &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Security principal(s) are specified as SIDs 
&nbsp; &nbsp;-r computer &nbsp; Specify computer to resolve SIDs. [LOCALHOST] 
&nbsp; &nbsp;-comment &nbsp; &nbsp; &nbsp;Display LG Comments 
&nbsp; &nbsp;-setcomment &nbsp; Set Comment for addgroup 
&nbsp; &nbsp;-lu &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; List Users (only used for . enumerate option) 
 
&nbsp; Ex1: 
&nbsp; &nbsp; lg domain\. 
&nbsp; &nbsp; &nbsp; Enumerate localgroups on domain 
 
&nbsp; Ex2: 
&nbsp; &nbsp; lg domain\. -lu 
&nbsp; &nbsp; &nbsp; Enumerate all localgroups and members on domain 
 
&nbsp; Ex3: 
&nbsp; &nbsp; lg \\computer\. 
&nbsp; &nbsp; &nbsp; Enumerate localgroups on computer 
 
&nbsp; Ex4: 
&nbsp; &nbsp; lg . -comment 
&nbsp; &nbsp; &nbsp; Enumerate localgroups and comments on localhost 
 
&nbsp; Ex5: 
&nbsp; &nbsp; lg users 
&nbsp; &nbsp; &nbsp; Enumerates members of localgroup users on localhost 
 
&nbsp; Ex6: 
&nbsp; &nbsp; lg \\computer\bob -addgroup -setcomment &quot;bobs group&quot; 
&nbsp; &nbsp; &nbsp; Create bob localgroup on computer with comment 
 
&nbsp; Ex7: 
&nbsp; &nbsp; lg bob -setcomment &quot;bobs group&quot; 
&nbsp; &nbsp; &nbsp; Sets comment for localgroup bob on localhost 
 
&nbsp; Ex8: 
&nbsp; &nbsp; lg users joe doug louise /add 
&nbsp; &nbsp; &nbsp; Adds joe, doug, and louise to localgroup joe 
 
&nbsp; Ex9: 
&nbsp; &nbsp; lg \comp1users louise -add -r comp3 
&nbsp; &nbsp; &nbsp; Adds SID resolved at comp3 for louise to localgroup joe on comp1 
 
 
&nbsp;This software is Freeware. Use it as you wish at your own risk. 
&nbsp;If you have improvement ideas, bugs, or just wish to say Hi, I 
&nbsp;receive email 24x7 and read it in a semi-regular timeframe. 
&nbsp;You can usually find me at joe@joeware.net 
 
&nbsp; &nbsp; 

</div>

<div>
<div class="content wysiwyg-content">
I want to find out what users are in the admin group on their machine on a 2003 domain. This isn't controlled by a domain policy. Is therea utility that can go out to each machine and query it's admin group membership?
</div>
</div>

I want to find out what users are in the admin group on their machine on a 2003 domain. This isn't controlled by a domain policy. Is therea utility that can go out to each machine and query it's admin group membership?

Export list of users who are in Administrators group in all clients in domain

The Microsoft Server topic includes all of the legacy versions of the operating system, including the Windows NT 3.1, NT 3.5, NT 4.0 and Windows 2000 and Windows Home Server versions.

Microsoft Server OS

This topic area includes legacy versions of Windows prior to Windows 2000: Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions including Windows Mobile.

Windows OS

Microsoft Windows XP is the sixth release of the NT series of operating systems, and was the first to be marketed in a variety of editions: XP Home and XP Professional, designed for business and power users. The advanced features in XP Professional are generally disabled in Home Edition, but are there and can be activated. There were two 64-bit editions, an embedded edition and a tablet edition.