02/28/2018 605 views

We have been able to successful add a Custom Inventory Rule and get the list of local admins per machine with the following

ShellCommandTextReturn(net localgroup Administrators)

the only issue we are getting is as a global company some of the local languages are not English, and are therefore not able to find the "Adminstrators" group.

Rather than have different rules with different languages (which is not a terrible workaround, but not flawless) I wondered if we could modify the statement to look for SID: S-1-5-32-544 instead of the group name "Administrators".

Any thoughts?


1 Comment   [ + ] Show comment


  • I'm not on a Windows PC at the moment but you should be able to loop the output of net local group Administrators and compare to the sub-keys located in the registry under HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

There are no answers at this time