Exporting users that are part of local administrator group of each joined to domain server?

Question

Exporting users that are part of local administrator group of each joined to domain server?

Abdulrahman 101

Hi Everyone!

I'm searching for a way to export all local administrator members in each joined to domain server.

Any recommended way either a powershell or cmd etc..

Matt roberts 5 Reputation points

2023-09-26T11:53:21.96+00:00
To get members of the local administrator group use this command. (You will need to be signed into the machine) Get-LocalGroupMember -Group "Administrators"

To get members of the local administrator group on a remote computer use this command. (PowerShell Remoting needs to be enabled)
Invoke-Command -ComputerName pc2 -ScriptBlock{Get-LocalGroupMember -Name 'Administrators'}

Here is a GUI tool that will scan all computers and get the members of the local admin group.
https://activedirectorypro.com/local-admins-reporting-tool/

2 answers

Your answer

Matt roberts 5 Reputation points

2023-09-26T11:53:21.96+00:00

To get members of the local administrator group use this command. (You will need to be signed into the machine) Get-LocalGroupMember -Group "Administrators"

To get members of the local administrator group on a remote computer use this command. (PowerShell Remoting needs to be enabled)
Invoke-Command -ComputerName pc2 -ScriptBlock{Get-LocalGroupMember -Name 'Administrators'}

Here is a GUI tool that will scan all computers and get the members of the local admin group.
https://activedirectorypro.com/local-admins-reporting-tool/

Answer 1

Are you looking for members of local domain group of Administrators
In that case you can use the following powershell on a DC:
Get-ADGroup Administrators | Get-ADGroupMember | Get-ADObject | Select-Object Name, ObjectClass
Are you looking for members of local group administrators on a domain controller?
When a windows server is promoted into a domain controller, the built-in local groups and local accounts get deleted and do not exist.
https://learn.microsoft.com/en-us/windows/win32/secmgmt/built-in-and-account-domains#computers-that-are-domain-controllers
If you are looking for members of local group administrators on a member/standalone server you can check local administrators group members via following powershell
https://learn.microsoft.com/en-us/windows/win32/secmgmt/built-in-and-account-domains#computers-that-are-not-domain-controllers
Get-LocalGroup Administrators | Get-LocalGroupMember

Regards

Answer 2

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Share via

Exporting users that are part of local administrator group of each joined to domain server?

2 answers

Your answer