Solved

Need a way to determine who has local admin rights to their PCs

Posted on 2012-03-26
6
371 Views
Last Modified: 2012-08-03
I'm looking for a way to determine who has local admin rights to their PCs. We have several hundred laptops/desktops so I'd like a way to get the data automatically. Everyone is on Windows XP/7
0
Comment
Question by:vitalsign0
6 Comments
 
LVL 9

Accepted Solution

by:
Geodash earned 450 total points
ID: 37766379
0
 
LVL 10

Expert Comment

by:pclinuxguru
ID: 37766432
You may want to check Power Users as well. back when XP SP3 came out we noticed power users doing a lot of things restricted to administrators. Well from some research they are one and the same.

"This inherent design flaw of the Power Users group is why the Windows team has been trying to get rid of it for years. Windows XP suppressed the Power Users group from the UI, so it was harder to add users. The group still exists, though, for backward compatibility. Don’t fool yourself into thinking the Power Users group is a step below an administrator. It’s pretty much the same thing"

http://technet.microsoft.com/en-us/magazine/hh824683.aspx
0
 
LVL 23

Expert Comment

by:Danny Child
ID: 37766446
Some info here on this:
http://blogs.technet.com/b/brad_rutkowski/archive/2007/01/06/find-out-the-members-of-the-local-administrator-group-remotely.aspx

but you may want to elaborate a bit more on the actual issue you are tring to resolve, as it may be that other groups of users can still cause problems without being actual Local Admins.
0
Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

 
LVL 1

Author Comment

by:vitalsign0
ID: 37766706
We are simply running an audit of who has local Admin rights to local machines. Knowing any Power Users would also be helpful.
0
 
LVL 10

Assisted Solution

by:pclinuxguru
pclinuxguru earned 50 total points
ID: 37766952
Well I can attest that the script Geodash posted works... used it a long time ago when our IT staff had changed.
0
 
LVL 65

Expert Comment

by:RobSampson
ID: 37768824
Hi, have a look at the script here (right down the bottom):
http://www.experts-exchange.com/Programming/Languages/Visual_Basic/VB_Script/Q_27498756.html

It will read computer names from servers.txt and write the members of the Administrators group to a CSV.

Regards,

Rob.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you try to share a printer , you may receive one of the following error messages. Error message when you use the Add Printer Wizard to share a printer: Windows could not share your printer. Operation could not be completed (Error 0x000006…
When you see single cell contains number and text, and you have to get any date out of it seems like cracking our heads.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question