Jump to content


Photo

Local Administrative Group

Reports Local Admin

  • Please log in to reply
2 replies to this topic

#1 JMurphy

JMurphy

    Member

  • Members
  • PipPip
  • 12 posts

Posted 01 November 2011 - 07:56 AM

I was trying to run a report that gave me the local and domain user accounts on PC's along with their respective privileges. The User Accounts report does seem to have that information, but it doesn't seem accurate. I specifically selected two computers where I knew that the domain accounts were in the local administrative group. However, the accounts were just listed as User and not Administrator. The local administrator account and all Domain Admin accounts were listed correctly as Administrator. Am I just thinking that the Privileges column works differently than it does or is there another way of getting the information I am looking for?

Thanks for any input you might have.

#2 Zak

Zak

    Administrator

  • Root Admin
  • PipPipPip
  • 695 posts
  • Gender:Male

Posted 01 November 2011 - 08:19 AM

The "Privileges" field that states "Administrator" or "User" is the base priviledge, i.e. base type of account. A user may be in local administrators group on this or that PC, but it's still a user in general, not administrator. For the purpose that you describe we have already tried to add a "Group membership" field for user accounts. But it appeared that the collection of group-user relationships is causing high load on the domain controllers and is leading to inappropriate increasing of scan time. So we were forced to disable this possibility until a resolution is found.

EDIT: This is my 500th post here :)
Softinventive Lab support

#3 JMurphy

JMurphy

    Member

  • Members
  • PipPip
  • 12 posts

Posted 01 November 2011 - 08:32 AM

I could see how trying to enumerate all the groups that all the individual User accounts are in could be process intensive. Maybe you could look at just showing the members of the local groups. That, at least, wouldn't cause the queries to AD that the other method would.

Thank you for your quick response.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users