Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Need a way to determine who has local admin rights to their PCs

Posted on 2012-03-26
6
Medium Priority
?
375 Views
Last Modified: 2012-08-03
I'm looking for a way to determine who has local admin rights to their PCs. We have several hundred laptops/desktops so I'd like a way to get the data automatically. Everyone is on Windows XP/7
0
Comment
Question by:vitalsign0
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 9

Accepted Solution

by:
Geodash earned 1800 total points
ID: 37766379
0
 
LVL 10

Expert Comment

by:pclinuxguru
ID: 37766432
You may want to check Power Users as well. back when XP SP3 came out we noticed power users doing a lot of things restricted to administrators. Well from some research they are one and the same.

"This inherent design flaw of the Power Users group is why the Windows team has been trying to get rid of it for years. Windows XP suppressed the Power Users group from the UI, so it was harder to add users. The group still exists, though, for backward compatibility. Don’t fool yourself into thinking the Power Users group is a step below an administrator. It’s pretty much the same thing"

http://technet.microsoft.com/en-us/magazine/hh824683.aspx
0
 
LVL 23

Expert Comment

by:Danny Child
ID: 37766446
Some info here on this:
http://blogs.technet.com/b/brad_rutkowski/archive/2007/01/06/find-out-the-members-of-the-local-administrator-group-remotely.aspx

but you may want to elaborate a bit more on the actual issue you are tring to resolve, as it may be that other groups of users can still cause problems without being actual Local Admins.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
LVL 1

Author Comment

by:vitalsign0
ID: 37766706
We are simply running an audit of who has local Admin rights to local machines. Knowing any Power Users would also be helpful.
0
 
LVL 10

Assisted Solution

by:pclinuxguru
pclinuxguru earned 200 total points
ID: 37766952
Well I can attest that the script Geodash posted works... used it a long time ago when our IT staff had changed.
0
 
LVL 65

Expert Comment

by:RobSampson
ID: 37768824
Hi, have a look at the script here (right down the bottom):
http://www.experts-exchange.com/Programming/Languages/Visual_Basic/VB_Script/Q_27498756.html

It will read computer names from servers.txt and write the members of the Administrators group to a CSV.

Regards,

Rob.
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
Here's a look at newsworthy articles and community happenings during the last month.
This Micro Tutorial will give you a introduction in two parts how to utilize Windows Live Movie Maker to its maximum capability. This will be demonstrated using Windows Live Movie Maker on Windows 7 operating system.
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7. Start the SARDU utility: Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…

670 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question