Re: script to list users and groups in domain admin and local admin gr
From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 03/25/05
- Next message: Steven L Umbach: "Re: dns best security practices"
- Previous message: Steven L Umbach: "Re: Drive Access denied"
- In reply to: crosswired: "script to list users and groups in domain admin and local admin gr"
- Next in thread: Manlytrash: "Re: script to list users and groups in domain admin and local admi"
- Reply: Manlytrash: "Re: script to list users and groups in domain admin and local admi"
- Reply: crosswired: "Re: script to list users and groups in domain admin and local admi"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 24 Mar 2005 22:02:53 -0600
Domain admins membership can be determined easily enough in Active Directory
users and Computers and as other posts have mentioned you can use scripts
using the net command and such to enumerate local administrators. FYI MBSA
can scan network computers and among other things be able to list the local
administrators on each computer. Group Policy computer configuration
Restricted Groups can be used to enforce membership in any domain or local
group if you want to consider such. If you want to use Restricted Groups to
restrict local computer administrators group be sure to do it at the OU
level only. --- Steve
http://www.microsoft.com/technet/security/tools/mbsahome.mspxb --- MBSA
"crosswired" <crosswired@discussions.microsoft.com> wrote in message
news:1BA8FDE1-B57F-42A1-9F35-E664D9F4960A@microsoft.com...
>I am looking for a script or guidance to write a script that will list all
> the users and groups that belong to the domain admin group and the local
> admin group on each server in the domain. This way, I will not have to
> check
> each server individually when doing periodic security scans.
>
> If anyone can help, I would appreciate. Thanks.
>
> N.P.
- Next message: Steven L Umbach: "Re: dns best security practices"
- Previous message: Steven L Umbach: "Re: Drive Access denied"
- In reply to: crosswired: "script to list users and groups in domain admin and local admin gr"
- Next in thread: Manlytrash: "Re: script to list users and groups in domain admin and local admi"
- Reply: Manlytrash: "Re: script to list users and groups in domain admin and local admi"
- Reply: crosswired: "Re: script to list users and groups in domain admin and local admi"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
