local admins report (AAD joined devices)

Question

local admins report (AAD joined devices)

crib bar 846

We used to run a tool called 'Get Local Admins GUI' when our servers and workstations were joined to an on-premises active directory domain, that would show which users and groups had local admin rights to all of our servers and workstations, and we could output the file to a CSV:

[http://www.cjwdev.co.uk/Software/GetLocalAdminsGUI/Info.html]

We are looking for an equivalent tool or script that can pull the same information from Azure AD / InTune managed devices, for an audit. Or any out-of-the-box reports within Azure AD/InTune that we could possibly use?

Do you have any recommendations if you have had to produce something like this? Ideally it would be something that would run over the entire directory/inventory for all devices, and not have to query each device as there is a sizeable number.

Accepted answer

1 additional answer

Your answer

Answer 1

Marcin Policht 51,055 MVP Volunteer Moderator

Refer to https://www.petervanderwoude.nl/post/enhance-inventory-reporting-with-local-administrator-information/

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

Answer 2

@crib bar, Thanks for posting in Q&A.

From your description, I know you want to create a report via Intune to show which users and groups had local admin rights to all of your servers and workstations.

Based on my research, there is no specific report available to get the information about users who have local admin rights on their devices via Intune. However, I find a link describe the methods of gathering local admin info via script as a reference:

https://www.systanddeploy.com/2021/12/intune-reporting-with-log-analytics.html

Non-official, just for reference.

Also you can open premier case to see if you can get more help on this.

https://learn.microsoft.com/en-us/mem/get-support

Thanks for your understanding.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Share via

local admins report (AAD joined devices)

1 additional answer

Your answer