Find-localAdmins.ps1

something exciting

Some information about the exciting thing

Table of contents generated with markdown-toc


Script

function Find-localAdmins {

	<#
	.SYNOPSIS
		List users in specified local group
	.DESCRIPTION
		Created: March 17, 2011 Jeff Patton
		This script searches ActiveDirectory for computers. It then queries each computer for the list of users who
		are in the local Administrators group.
	.PARAMETER ADSPath
		The LDAP URI of the container you wish to pull computers from.
	.PARAMETER GroupName
		The name of the local group to pull membership pfrom.
	.EXAMPLE
		find-localadmins "LDAP://OU=Workstations,DC=company,DC=com"
	.NOTES
		You will need to run this script as an administrator or disable UAC to update the event-log
		You will need to have at least Read permissions in the AD container in order to get a list of computers.
	.LINK
		http://scripts.patton-tech.com/wiki/PowerShell/Production/FindLocalAdmins
	#>

	Param
	(
		[Parameter(Mandatory = $true)]
		[string]$ADSPath,
		[Parameter(Mandatory = $true)]
		[string]$GroupName
	)
	Begin {
		$ScriptName = $MyInvocation.MyCommand.ToString()
		$LogName = "Application"
		$ScriptPath = $MyInvocation.MyCommand.Path
		$Username = $env:USERDOMAIN + "\" + $env:USERNAME

		New-EventLog -Source $ScriptName -LogName $LogName -ErrorAction SilentlyContinue

		$Message = "Script: " + $ScriptPath + "`nScript User: " + $Username + "`nStarted: " + (Get-Date).toString()
		Write-EventLog -LogName $LogName -Source $ScriptName -EventID "100" -EntryType "Information" -Message $Message

		#	Dotsource in the AD functions
		. .\includes\ActiveDirectoryManagement.ps1
	}
	Process {
		$computers = Get-ADObjects $ADSPath

		foreach ($computer in $computers) {
			if ($null -eq $computer) {}
			else {
				$groups = Get-LocalGroupMembers $computer.Properties.name $GroupName
				If ($null -ne $groups) {
					write-host "Accounts with membership in $GroupName on: " $computer.Properties.name
					$groups | Format-Table -autosize
				}
			}
		}
	}
	End {
		$Message = "Script: " + $ScriptPath + "`nScript User: " + $Username + "`nFinished: " + (Get-Date).toString()
		Write-EventLog -LogName $LogName -Source $ScriptName -EventID "100" -EntryType "Information" -Message $Message
	}
}

Back to Top


Download

Please feel free to copy parts of the script or if you would like to download the entire script, simple click the download button. You can download the complete repository in a zip file by clicking the Download link in the menu bar on the left hand side of the page.


Report Issues

You can report an issue or contribute to this site on GitHub. Simply click the button below and add any relevant notes. I will attempt to respond to all issues as soon as possible.

Issue


Back to Top