Show ADMIN Changes

[Russell_hajek]

Our users have always had Local Admin access (we are a small company and we haven't gotten around to restricting them).

It appears that some users are removing the IT admins and scanning accounts so that LANSWEEPER DOESNT SCAN THEIR MACHINE.

We have been trying to police the software they install and smart users may try to avoid tool

[Hemoco · Accepted solution]

We have made a report that will show all users that are added and removed from the admin groups in the last 5 days:

Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblUsersInGroupHist.Username,
Case tblUsersInGroupHist.Action When 1 Then 'added to'
When 2 Then 'removed from' End As action,
tblUsersInGroupHist.Groupname,
tblUsersInGroupHist.Lastchanged
From tblUsersInGroupHist
Inner Join tblAssets On tblAssets.AssetID = tblUsersInGroupHist.AssetID
Where tblUsersInGroupHist.Groupname = 'Administrators' And
tblUsersInGroupHist.Lastchanged > GetDate() - 5

Please use the report below for the information you are after.
To use the report above, do the following:
•Open the report builder under Reports/Create New Report.
•Paste the SQL code we provided at the bottom of the page.
•Left-click somewhere in the upper section of the page so the code applies.
•Give the report a Title and hit the Save & Run button to save it. Export options are listed on the left.