/build/static/layout/Breadcrumb_cap_w.png

How to retrieve all local user account information on remote computers

Hello,

  I am wanting to audit all of our domain computers local user accounts. Is there a way to use the K1000 to get this information or are there any scripts that I can use with the dell kace? All computers have the dell kace agent already installed and all computers are on the domain.

Thanks,
n0x

3 Comments   [ + ] Show comments
  • ChuckSteel once I setup the Software Inventory Rule, what do I need to do in order to enable it? At this time I have the Inventory Rule setup, but none of the computers that are checking in seem to be picking this up under Custom Inventory Fields. - n0x 9 years ago
  • I am not sure how to upload a screenshot to this post. This is what I have currently:

    Software:
    Display Name (Title): Local Windows Users
    Publisher (Vendor): ACME INC
    Display Version: 1

    Supported Operating Systems: I have all Microsoft Windows 7 and Microsoft Windows XP selected

    Custom Inventory Rule: ShellCommandTextReturn(net user) I have also tried the syntax as suggested by SMal.tmcc - n0x 9 years ago
  • Check out my answer from this post. You can get the local admin users. Just replace the word DOMAIN at the end with your domain name.

    http://www.itninja.com/question/i-need-to-list-all-accounts-with-local-admin-right-to-a-machine - flip1001 9 years ago

Answers (6)

Posted by: chucksteel 9 years ago
Red Belt
2
I would collect this information using a custom inventory rule.
In Inventory, Software click Choose Action, New.
Enter a name, e.g. Local Windows Users
I usually enter a version of 1 and my institution as the publisher
For selected operating systems select the versions of Windows that apply
In the Custom Inventory Rule enter the following:
ShellCommandTextReturn(net user)
Click Save

When computers check in they will run the net user command and the results will be returned to KACE. On the inventory detail for the machine you will be able to look in the Custom Inventory Fields section to see the output. You will also be able to create a report to view the data and export it to Excel for further processing.


Comments:
  • you may have to format CIR rule this way:

    ShellCommandTextReturn(cmd.exe /c net.exe user)

    I have one CIR to capture the local admin group.

    ShellCommandTextReturn(cmd.exe /c net.exe localgroup administrators) - SMal.tmcc 9 years ago
    • Once I setup the Software Inventory Rule, what do I need to do in order to enable it? At this time I have the Inventory Rule setup, but none of the computers that are checking in seem to be picking this up under Custom Inventory Fields. - See more at: http://www.itninja.com/question/how-to-retrieve-all-local-user-account-information-on-remote-computers?utm_source=itn_email&utm_medium=answer_alert&utm_campaign=notifications&utm_content=question_permalink#sthash.OKjUMfK5.dpuf - n0x 9 years ago
      • You shouldn't have to do anything to enable it. Can you post a screenshot of the rule? - chucksteel 9 years ago
      • most common mistake is you did not pick the supported operating system(s) - SMal.tmcc 9 years ago
Posted by: Badger 9 years ago
Red Belt
0

your initial question was users. "I am wanting to audit all of our domain computers local user accounts"  

the command you have that works is about members of a local group.

You don't need powershell to do that.

just

net localgroup administrators

net users will give you a list of LOCAL users, but you will not know if they are in the administrators group

 

Posted by: BNewland 1 year ago
Yellow Belt
0

The problem with your CIR is the "net" command is not available in the 32-bit SysWow64 folder on 64-bit systems. KACE launches everything as a 32-bit process. 


You would need to use something like this:

ShellCommandTextReturn(%windir%\sysnative\cmd.exe/C "net localgroup administrators" && exit /B)

Posted by: MissyBek 1 year ago
White Belt
0


Posted by: h2opolo25 9 years ago
Red Belt
0
sydiproject.com/tools/sydi-audit-localgroups/   <- This might work
Posted by: n0x 9 years ago
White Belt
0
I was able to locate the answer. It appears I had to end up using powershell in order to get the information that I needed. The Customer Inventory Rule was as follows:

ShellCommandTextReturn(cmd.exe /c powershell net.exe localgroup administrators)

Thanks for all the help pointing me in the right direction.

Comments:
  • Interesting. I'm not sure why you have to invoke powershell on your systems. Also, that command will return users in the local administrators group not all local users. - chucksteel 9 years ago

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login

View more:

Share

 
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ