Hi, how can I create BigFix analysis to find what local admin user that run services on the server (local user/Domain User).
thx in advance.
Welcome to the BigFix Community!
Looks like @jgstew has the answer for this in this thread. If this isn’t what you want just post back here.
it doesn’t seem to be working.
Can you elaborate on what you are doing to test this? Because it works for me (my test machine is quite slow!). Are you sure you have a service running as local admin when you’re testing this? I just randomly made my DHCP client run as local admin… its normally local service.
q: display names of services whose (login account of it as lowercase ends with ((it as lowercase) of ("\" & it) of following text of first "\" of (sid of (local users; local groups) whose ((exist matches (regex "^S-1-5-[0-9-]+500$") of component string of sid of it)) as string)))
A: DHCP Client
T: 8454.672 ms
I: plural string
Maybe i’m not understanding exactly what your trying to do but we have an analysis that collects the display Name of the service, the state of the service, the image path, and login account that the service is running under. Hopefully this helps you.
(display name of it | “n/a” , state of it | “n/a” , (first 1024 of it | it) of image path of it | “n/a”, login account of it | “n/a”) of services
Hi, thanks for quick resnpond.
I would like to get name of the service / name of the login user (only if the user in local admin Group).