Allowed Administrators

[mrdaytrade]

In version 3.5.2.16 I was able to enter an * in the domain column so the local admin accounts on the box would not appear in the Unauthorized Admin report. However, in 4.0 when I enter an * in the domain column and an admin name in the other column it still keeps that admin account in the report.

[DGoodwin]

I have the same issue per computer. For each local admin account and each machine, I have an entry.

Computer1 hardware
Computer1 backupadmin
Computer2 hardware
Computer2 backupadmin
Computer3 hardware
Computer3 backupadmin

Both user accounts are local admins on a multitude of pc's and those are all showing up as well.
I can only get them to be removed from the unauthorized administrators list by adding each machine and the respective account individually. I have tried to change the table to allow nulls in the domain field and it still doesn't remove them. In version 3.5 this works as described.

I can provide a screenshot if needed to assist.

[mrdaytrade]

Here are some of the SID's for the Local Admin accounts that are created on the PC's. I noticed that in dbo.tblUsers the column, BuildInAdmin indicates False for all the SID's below.

S-1-5-21-1343024091-1844823847-682003330-1001

S-1-5-21-860563580-302994900-893080142-1003

S-1-5-21-1123561945-746137067-1957994488-1004

S-1-5-21-3911266212-2268501937-226194780-1005

S-1-5-21-823518204-1614895754-725345543-1004

I take back altering the web40replocaladmin in SQL.. if i filter the username the table crashes when accessing lansweeper.

[mrdaytrade]

Local admin accounts that were created on the box are showing up on the report. It filters out the Domain admin accounts just fine. It doesnt appear to filter out a local admin account that was created on the box prior to joining it to the domain. I have figured out that I can just filter out those admin names in the Username column in SQL.

[Hemoco]

mrdaytrade wrote:
Local admin accounts that were created on the box are showing up on the report. It filters out the Domain admin accounts just fine. It doesnt appear to filter out a local admin account that was created on the box prior to joining it to the domain. I have figured out that I can just filter out those admin names in the Username column in SQL.

Could you post the SID of the buildin local admin account not found please (column SID)

[mrdaytrade]

Here's my problem though. We rename our local admin account to something other than Administrator. So our local admin name shows up on the report with every pc listed under domainname. We have several departments that all have different local admin names too.

[Hemoco]

mrdaytrade wrote:
Here's my problem though. We rename our local admin account to something other than Administrator. So our local admin name shows up on the report with every pc listed under domainname. We have several departments that all have different local admin names too.

The latest version of the beta detects the local admin even if it is renamed.

[Hemoco]

In version 4 the local administrator account is automatically filtered out.