Hello,

  I am wanting to audit all of our domain computers local user accounts. Is there a way to use the K1000 to get this information or are there any scripts that I can use with the dell kace? All computers have the dell kace agent already installed and all computers are on the domain.

Thanks,
n0x
3 Comments   [ + ] Show Comments

Comments

  • ChuckSteel once I setup the Software Inventory Rule, what do I need to do in order to enable it? At this time I have the Inventory Rule setup, but none of the computers that are checking in seem to be picking this up under Custom Inventory Fields.
  • I am not sure how to upload a screenshot to this post. This is what I have currently:

    Software:
    Display Name (Title): Local Windows Users
    Publisher (Vendor): ACME INC
    Display Version: 1

    Supported Operating Systems: I have all Microsoft Windows 7 and Microsoft Windows XP selected

    Custom Inventory Rule: ShellCommandTextReturn(net user) I have also tried the syntax as suggested by SMal.tmcc
  • Check out my answer from this post. You can get the local admin users. Just replace the word DOMAIN at the end with your domain name.

    http://www.itninja.com/question/i-need-to-list-all-accounts-with-local-admin-right-to-a-machine
Please log in to comment

Community Chosen Answer

2
I would collect this information using a custom inventory rule.
In Inventory, Software click Choose Action, New.
Enter a name, e.g. Local Windows Users
I usually enter a version of 1 and my institution as the publisher
For selected operating systems select the versions of Windows that apply
In the Custom Inventory Rule enter the following:
ShellCommandTextReturn(net user)
Click Save

When computers check in they will run the net user command and the results will be returned to KACE. On the inventory detail for the machine you will be able to look in the Custom Inventory Fields section to see the output. You will also be able to create a report to view the data and export it to Excel for further processing.

Answered 10/02/2014 by: chucksteel
Red Belt

  • you may have to format CIR rule this way:

    ShellCommandTextReturn(cmd.exe /c net.exe user)

    I have one CIR to capture the local admin group.

    ShellCommandTextReturn(cmd.exe /c net.exe localgroup administrators)
    • Once I setup the Software Inventory Rule, what do I need to do in order to enable it? At this time I have the Inventory Rule setup, but none of the computers that are checking in seem to be picking this up under Custom Inventory Fields. - See more at: http://www.itninja.com/question/how-to-retrieve-all-local-user-account-information-on-remote-computers?utm_source=itn_email&utm_medium=answer_alert&utm_campaign=notifications&utm_content=question_permalink#sthash.OKjUMfK5.dpuf
      • You shouldn't have to do anything to enable it. Can you post a screenshot of the rule?
      • most common mistake is you did not pick the supported operating system(s)
Please log in to comment

Answers

0

your initial question was users. "I am wanting to audit all of our domain computers local user accounts"  

the command you have that works is about members of a local group.

You don't need powershell to do that.

just

net localgroup administrators

net users will give you a list of LOCAL users, but you will not know if they are in the administrators group

 

Answered 10/13/2014 by: Badger
Red Belt

Please log in to comment
0
sydiproject.com/tools/sydi-audit-localgroups/   <- This might work
Answered 10/01/2014 by: h2opolo25
Red Belt

Please log in to comment
0
I was able to locate the answer. It appears I had to end up using powershell in order to get the information that I needed. The Customer Inventory Rule was as follows:

ShellCommandTextReturn(cmd.exe /c powershell net.exe localgroup administrators)

Thanks for all the help pointing me in the right direction.
Answered 10/03/2014 by: n0x
White Belt

  • Interesting. I'm not sure why you have to invoke powershell on your systems. Also, that command will return users in the local administrators group not all local users.
Please log in to comment
Answer this question or Comment on this question for clarity
Admin Script Editor
Admin Script Editor is an integrated scripting environment available free here at ITNinja

Share