Link to home
Start Free TrialLog in
Avatar of vitalsign0
vitalsign0

asked on

Need a way to determine who has local admin rights to their PCs

I'm looking for a way to determine who has local admin rights to their PCs. We have several hundred laptops/desktops so I'd like a way to get the data automatically. Everyone is on Windows XP/7
ASKER CERTIFIED SOLUTION
Avatar of Geodash
Geodash
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
You may want to check Power Users as well. back when XP SP3 came out we noticed power users doing a lot of things restricted to administrators. Well from some research they are one and the same.

"This inherent design flaw of the Power Users group is why the Windows team has been trying to get rid of it for years. Windows XP suppressed the Power Users group from the UI, so it was harder to add users. The group still exists, though, for backward compatibility. Don’t fool yourself into thinking the Power Users group is a step below an administrator. It’s pretty much the same thing"

http://technet.microsoft.com/en-us/magazine/hh824683.aspx
Avatar of Danny Child
Some info here on this:
http://blogs.technet.com/b/brad_rutkowski/archive/2007/01/06/find-out-the-members-of-the-local-administrator-group-remotely.aspx

but you may want to elaborate a bit more on the actual issue you are tring to resolve, as it may be that other groups of users can still cause problems without being actual Local Admins.
Avatar of vitalsign0
vitalsign0

ASKER

We are simply running an audit of who has local Admin rights to local machines. Knowing any Power Users would also be helpful.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hi, have a look at the script here (right down the bottom):
https://www.experts-exchange.com/questions/27498756/VBscript-to-pull-local-admin-users-and-groups.html

It will read computer names from servers.txt and write the members of the Administrators group to a CSV.

Regards,

Rob.