Get Local Administrators Tool
Get a List of Local Administrators on
All Computers in Active Directory
Scan domain computers to list all members of the local administrators group.
See which users or groups have local admin rights, export report to csv.
How to Get Local Administrators
Users that have local administrator rights have full control over the local computer. This allows users to install unwanted software, change computer settings, and makes it easier for viruses and malicious software to be installed. It also makes it easier for hackers to take control of your computer.
With the AD Pro Toolkit, you can easily scan computers and get the members of local groups such as the administrators group.
Step 1. Open Local Admins Report Tool
Click on “Security Tools” and then “Local Admins Report”
Select a path or choose from a CSV file.
Options:
- Show All groups = By default, the tool will only get the members of the administrators group. Select this box to get members of all local groups.
- Include Nested Groups = Get the members of nested groups
In this example, I’ll scan all computers.
Step 2. Review local administrator list
The report will list the following:
- Computer
- Group Name
- Member name
- Object classs (user or group)
- Principal Source (local user or domain user)
- Status
In the above screenshot, you can see the server computer srv-vm1 has 3 groups and 2 user accounts that are a member of the local administrator group.
Step 3. Export to CSV
To export the list, click the export button.
