Find-localAdmins.ps1
Description
@GitHub Copilot - Welcome @BanterBoy, I’m your Copilot and I’m here to help you get things done faster. I can identify issues, explain and even improve code.
You can ask generic questions, but what I’m really good at is helping you with your code. For example:
Generate unit tests for my code Explain the selected code Propose a fix for the bugs in my code If you want to learn more about my capabilities and limitations, check out the Copilot documentation.
I’m powered by AI, so surprises and mistakes are possible. Make sure to verify any generated code or suggestions, and share feedback so that we can learn and improve.
@BanterBoy: - Explain what the script does and why it is useful.
@GitHub Copilot -
Script
function Find-localAdmins {
<#
.SYNOPSIS
List users in specified local group
.DESCRIPTION
Created: March 17, 2011 Jeff Patton
This script searches ActiveDirectory for computers. It then queries each computer for the list of users who
are in the local Administrators group.
.PARAMETER ADSPath
The LDAP URI of the container you wish to pull computers from.
.PARAMETER GroupName
The name of the local group to pull membership pfrom.
.EXAMPLE
find-localadmins "LDAP://OU=Workstations,DC=company,DC=com"
.NOTES
You will need to run this script as an administrator or disable UAC to update the event-log
You will need to have at least Read permissions in the AD container in order to get a list of computers.
.LINK
http://scripts.patton-tech.com/wiki/PowerShell/Production/FindLocalAdmins
#>
Param
(
[Parameter(Mandatory = $true)]
[string]$ADSPath,
[Parameter(Mandatory = $true)]
[string]$GroupName
)
Begin {
$ScriptName = $MyInvocation.MyCommand.ToString()
$LogName = "Application"
$ScriptPath = $MyInvocation.MyCommand.Path
$Username = $env:USERDOMAIN + "\" + $env:USERNAME
New-EventLog -Source $ScriptName -LogName $LogName -ErrorAction SilentlyContinue
$Message = "Script: " + $ScriptPath + "`nScript User: " + $Username + "`nStarted: " + (Get-Date).toString()
Write-EventLog -LogName $LogName -Source $ScriptName -EventID "100" -EntryType "Information" -Message $Message
# Dotsource in the AD functions
. .\includes\ActiveDirectoryManagement.ps1
}
Process {
$computers = Get-ADObjects $ADSPath
foreach ($computer in $computers) {
if ($null -eq $computer) {}
else {
$groups = Get-LocalGroupMembers $computer.Properties.name $GroupName
If ($null -ne $groups) {
write-host "Accounts with membership in $GroupName on: " $computer.Properties.name
$groups | Format-Table -autosize
}
}
}
}
End {
$Message = "Script: " + $ScriptPath + "`nScript User: " + $Username + "`nFinished: " + (Get-Date).toString()
Write-EventLog -LogName $LogName -Source $ScriptName -EventID "100" -EntryType "Information" -Message $Message
}
}
Download
Please feel free to copy parts of the script or if you would like to download the entire script, simple click the download button. You can download the complete repository in a zip file by clicking the Download link in the menu bar on the left hand side of the page.
Report Issues
You can report an issue or contribute to this site on GitHub. Simply click the button below and add any relevant notes. I will attempt to respond to all issues as soon as possible.