Category filter
Script to list admin users on Windows devices
Identifying all local administrators on the device aids in user management, enabling IT administrators to modify user privileges as the roles and requirements change over time. Moreover, the permissions extended on the device for a user as the local administrator should also be managed. For instance, the ability to create a user account lets them create other accounts (both standard and administrator) that may or may not be misused. You can reconsider who can extend such administrator-based privileges on the devices from time to time. Therefore, regular monitoring of users with administrative privileges is essential to maintain the security and integrity of the system.
All users with admin privileges can be easily fetched by deploying the script to list admin users using the Hexnode’s Execute Custom Script action.
The sample scripts provided below are adapted from third-party open-source sites.
Scripts to list user with admin privileges
Below are the scripts to list admin users on a Windows device:
PowerShell
|
1 2 3 4 5 6 7 8 |
# Get a list of local groups that have administrators $adminGroup = Get-LocalGroupMember -Group "Administrators" # Output the members of the administrators group Write-Host "Users with administrator privileges:" foreach ($user in $adminGroup) { Write-Host $user.Name } |
The PowerShell script fetches and displays users/groups with administrator privileges on a Windows system. It first retrieves the members of the “Administrators” local group using the Get-LocalGroupMember cmdlet and stores them in the $adminGroup variable. Then, it outputs the names of these users in the Action History in the Hexnode UEM console.
Batch
|
1 2 3 |
@echo off echo Users with administrator privileges: net localgroup Administrators |
When executed, this batch script fetches and displays the list of users and groups in the Action History in the Hexnode UEM console who are members of the “Administrators” group, indicating who has administrative access on the system.
net: This is the command-line tool used to manage network resources in Windows.
localgroup: This is a subcommand of net that allows you to manage local groups on the system.
Administrators: This is the name of the local group whose members you want to list. In this case, it refers to the built-in Windows group “Administrators“, which typically contains users and groups with administrative privileges.
- It is recommended to manually validate the script execution on a system before executing the action in bulk.
- Hexnode will not be responsible for any damage/loss to the system on the behavior of the script.
