Unauthorized local admin report

[dallows]

Hello,

Trying to find out if the unauthorized local admin report can identify or label if the account is a user or group?

I'm pretty sure Windows knows the difference because it uses different icons when you're viewing the local admins group, but I don't know if Lansweeper can tell or is tracking that information.


Thanks.

[Bruce_B]

This question was also asked via email, I've added my reply below for everyone else's benefit.

The report you're describing is possible, we've added a modified version of the Unauthorized administrators report below that includes a column indicating whether the account in question is a group or a user. Do note that to ensure the accuracy of the report you'll need to have successfully scanned all relevant domains using Active Directory User/Group scanning: https://www.lansweeper.com/kb/131/scanning-with-domain-user-scanning.html

Select Top 1000000 tsysOS.Image As icon,
tblAssets.AssetID,
tblAssets.AssetName,
tblUsersInGroup.Domainname,
tblUsersInGroup.Username,
Case
When tblUsersInGroup.Username = tblADGroups.Name Then 'Group'
Else 'User'
End As [User Or Group],
tblUsersInGroup.Lastchanged,
tblAssets.Domain,
tblAssets.IPAddress,
tblAssets.Description,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tblAssetCustom.Location,
tsysIPLocations.IPLocation,
tsysOS.OSname As OS,
tblAssets.SP As SP,
tblAssets.Firstseen,
tblAssets.Lastseen
From tblUsersInGroup
Inner Join tblAssets On tblUsersInGroup.AssetID = tblAssets.AssetID
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysOS On tblAssets.OScode = tsysOS.OScode
Left Join tsysIPLocations On tsysIPLocations.StartIP <= tblAssets.IPNumeric
And tsysIPLocations.EndIP >= tblAssets.IPNumeric
Left Join tblADGroups On tblADGroups.Name = tblUsersInGroup.Username
Where Not Exists(Select tblAssets.AssetName As Domain,
tblUsers.Name As Username
From tblAssets Inner Join tblUsers On tblAssets.AssetID = tblUsers.AssetID
Where tblUsers.BuildInAdmin = 1 And tblUsersInGroup.Domainname =
tblAssets.AssetName And tblUsersInGroup.Username = tblUsers.Name) And
Not Exists(Select tsysadmins.Domain,
tsysadmins.AdminName As username From tsysadmins
Where tblUsersInGroup.Domainname Like tsysadmins.Domain And
tblUsersInGroup.Username Like tsysadmins.AdminName) And
tblUsersInGroup.Admingroup = 1 And tblAssetCustom.State = 1
Order By tblAssets.AssetName