Reporting Query

[Dan1979]

Hi Guys,

we dont allow our users admin rights on their machines

Over time for one reason or another we have granted it to some of them to install software and we may have forgot to take the rights away

I dont know if its possible or not to run a report or query to find out who still has Admin Rights on their machines??

Any Help would be greatly appreciated because as a company we are all SMS N00bs!!!

 

[ncotton]

Did u grant elevate their users accounts (as Domain AD accounts) or did you add their domain account as a local administrator on the PC it'sself?

Neil J Cotton
njc Information Systems
Systems Consultant
HND, BSc HONS, CCNA, BCS, IETF, DMTF

 

[Dan1979]

Thanks for the reply

Their domain accounts were added as a local admin to the PC itself.

Just really want to know if its possible to return the infomation in the Administrators Group

 

[ncotton]

I dont think it is anything SMS collects, but I'll have a look at some WMI and see if we can get a class to return it through HWInv, or create a dirrect remote WMI query.

Neil J Cotton
njc Information Systems
Systems Consultant
HND, BSc HONS, CCNA, BCS, IETF, DMTF

 

[tbrennans]

Or extend the sms_def.mof with like SMS expert does:

<snip>

#pragma namespace("\\\\.\\root\\cimv2\\SMS")
#pragma deleteclass("SMX_LocalAdmins",NOFAIL)


[SMS_Report(TRUE),
SMS_Group_Name("Local Administrators"),
SMS_Class_ID("SMSEXPERT|SMXLocalAdmins|1.0") ]

Class SMX_LocalAdmins : SMS_Class_Template
{
[SMS_Report(TRUE),key]
string Account;
};

</snip>

 

[tbrennans]

check this out also:

http://www.myitforum.com/forums/tm....y=local,admin&language=single&tmode=&s=#98310

 

[tbrennans]

I hate that you cat edit in here :-D

http://www.smsexpert.com/mof/scripts.asp

the mof upgrade links to the datashift link in the lower left hand side of this page...

http://www.smsexpert.com/downloads/DataShift/DataShift-LocalAdmin.zip