How to retrieve all local user account information on remote computers
Hello,
I am wanting to audit all of our domain computers local user accounts. Is there a way to use the K1000 to get this information or are there any scripts that I can use with the dell kace? All computers have the dell kace agent already installed and all computers are on the domain.
Thanks,
n0x
3 Comments
[ + ] Show comments
Answers (6)
Please log in to answer
Posted by:
chucksteel
10 years ago
I would collect this information using a custom inventory rule.
In Inventory, Software click Choose Action, New.
Enter a name, e.g. Local Windows Users
I usually enter a version of 1 and my institution as the publisher
For selected operating systems select the versions of Windows that apply
In the Custom Inventory Rule enter the following:
ShellCommandTextReturn(net user)
Click Save
When computers check in they will run the net user command and the results will be returned to KACE. On the inventory detail for the machine you will be able to look in the Custom Inventory Fields section to see the output. You will also be able to create a report to view the data and export it to Excel for further processing.
Comments:
-
you may have to format CIR rule this way:
ShellCommandTextReturn(cmd.exe /c net.exe user)
I have one CIR to capture the local admin group.
ShellCommandTextReturn(cmd.exe /c net.exe localgroup administrators) - SMal.tmcc 10 years ago-
Once I setup the Software Inventory Rule, what do I need to do in order to enable it? At this time I have the Inventory Rule setup, but none of the computers that are checking in seem to be picking this up under Custom Inventory Fields. - See more at: http://www.itninja.com/question/how-to-retrieve-all-local-user-account-information-on-remote-computers?utm_source=itn_email&utm_medium=answer_alert&utm_campaign=notifications&utm_content=question_permalink#sthash.OKjUMfK5.dpuf - n0x 10 years ago
-
You shouldn't have to do anything to enable it. Can you post a screenshot of the rule? - chucksteel 10 years ago
-
most common mistake is you did not pick the supported operating system(s) - SMal.tmcc 10 years ago
Posted by:
Badger
10 years ago
your initial question was users. "I am wanting to audit all of our domain computers local user accounts"
the command you have that works is about members of a local group.
You don't need powershell to do that.
just
net localgroup administrators
net users will give you a list of LOCAL users, but you will not know if they are in the administrators group
Posted by:
BNewland
1 year ago
The problem with your CIR is the "net" command is not available in the 32-bit SysWow64 folder on 64-bit systems. KACE launches everything as a 32-bit process.
You would need to use something like this:
ShellCommandTextReturn(%windir%\sysnative\cmd.exe/C "net localgroup administrators" && exit /B)
Posted by:
n0x
10 years ago
I was able to locate the answer. It appears I had to end up using powershell in order to get the information that I needed. The Customer Inventory Rule was as follows:
ShellCommandTextReturn(cmd.exe /c powershell net.exe localgroup administrators)
Thanks for all the help pointing me in the right direction.
Comments:
-
Interesting. I'm not sure why you have to invoke powershell on your systems. Also, that command will return users in the local administrators group not all local users. - chucksteel 10 years ago
Software:
Display Name (Title): Local Windows Users
Publisher (Vendor): ACME INC
Display Version: 1
Supported Operating Systems: I have all Microsoft Windows 7 and Microsoft Windows XP selected
Custom Inventory Rule: ShellCommandTextReturn(net user) I have also tried the syntax as suggested by SMal.tmcc - n0x 10 years ago
http://www.itninja.com/question/i-need-to-list-all-accounts-with-local-admin-right-to-a-machine - flip1001 10 years ago