Local Admin Users

Hey guys.
I’ve been thrown in the deep end a bit and need some assistance with the following:

  • Checking the local administrators group
  • If there are any other groups other than domain\group1, domain\group2, localuser1, localuser2 - then remove those groups.
  • If missing “domain\group1”, the add…

Any ideas how I can go about this?

Very new to the software so knowledge is fairly basic. Would be greatful if I could be pointed in the right direction…

Rob.

These are related:

http://bigfix.me/analysis/details/2994547
http://bigfix.me/analysis/details/2994546

1 Like

Perfect, thank you!
These are for Windows machine, so will be using 2994547.

Is it then possible to remove someone from the admin group who that doesn’t match a set list?

Use the example relevance in the analyses to detect when this is needed and use that for a fixlet/task with actionscript that does whatever you need to do on the command line to add or remove users.

I found some examples:

Related:

http://bigfix.me/fixlet/details/3624
http://bigfix.me/fixlet/details/99
http://bigfix.me/fixlet/details/98
http://bigfix.me/fixlet/details/3670

Thank you.
One last one: is it possible to amend your Local Admin/User Audit to add in a property to check which domain users are administrators on the PC? I try add one in but I get rather than the formating you have.

Hi,
I have tried out these analysis’ however, they don’t seem to show domain users who have been added to the local admin group on a PC.
Do you know of a way to modify the analysis to show this?

Something like this should show both local and domain users who are in the administrators group.

concatenation "; " of (members of local group "Administrators" as string)
1 Like