How to export the users accounts who have local admin access on their corporate owned devices via Intune or any other way like PowerShell?

Question

How to export the users accounts who have local admin access on their corporate owned devices via Intune or any other way like PowerShell?

Vinod Survase 4,781

Rahul Jindal [MVP] 10,911 Reputation points MVP

2023-05-11T05:45:02.54+00:00

Nothing available natively. Possible using graph.
Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2023-05-26T10:05:41.38+00:00

Hi @Vinod Survase ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Accepted answer

0 additional answers

Your answer

Rahul Jindal [MVP] 10,911 Reputation points MVP

2023-05-11T05:45:02.54+00:00

Nothing available natively. Possible using graph.
Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2023-05-26T10:05:41.38+00:00

Hi @Vinod Survase ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Answer 1

Dillon Silzer 57,831 Volunteer Moderator

Hi Vinod,

As Rahul stated, there is nothing available natively.

A suggestion though is to deploy a PowerShell script using Intune:

Use PowerShell scripts on Windows 10/11 devices in Intune

https://learn.microsoft.com/en-us/mem/intune/apps/intune-management-extension

In the PowerShell script you could Invoke or Get-LocalGroupMember for the Administrator group and send that data to a shared server or a POST request.

Invoke-WebRequest (POST)

https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.utility/invoke-webrequest?view=powershell-7.3

It would require some custom scripting to get this information, but your POST request could send to a web server in which it translates to a database record. You'd want to send the machine's name, and the members of the Admin group recursively.

If this is helpful please accept answer.

Vinod Survase 4,781 Reputation points

2023-06-01T12:52:29.65+00:00

Thanks @Dillon Silzer

I will check these docs and work on it.
TJ 0 Reputation points

2023-07-06T01:56:17.5333333+00:00

@Dillon Silzer - would you be able to provide guide on how to do this. I'm trying to get all users with local admin around 4000+ machines.

Share via

How to export the users accounts who have local admin access on their corporate owned devices via Intune or any other way like PowerShell?

0 additional answers

Your answer