This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(137.6, 78%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hi!
We're wanting to track down all the user accounts in our domain that currently have local administrative rights on any of our Windows 10 computers. Searching online I came across many convoluted methods that might work to get a list like this put together, but I'm curious what do other people currently do for this scenario? Is there a tool that might actually help do this efficiently?
Thanks in advance for any help!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 62%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDZ%3C/text%3E%3C/svg%3E)
Hello @armandothegreat ,
I am just writing to see if this question has any update. If anything is unclear, please feel free to let us know.
Thanks for your time and have a nice day!
Best Regards,
Daisy Zhou
Hello @armandothegreat ,
I just want to confirm the current situations.
Please feel free to let us know if you need further assistance.
Best Regards,
Daisy Zhou
Hi,
While the replies here are typical for forums - they are not that helpful in reality.
I have used the script that you mentioned previously, but that only works if machines are reachable and turned on. With the current status of the world - most of our machines are only checking in/etc. over VPN so running such a script isn't useful in any way. Possibly a solution via SCCM client could work, but everything I came across online so far seemed highly unreliable. I'd imagine this would be a good piece of tooling for MS to build into something in the future since all domain admins would find it useful.
Thanks anyway.
Hello @armandothegreat ,
I am sorry, it did not help.
i suggest we can post our request on script forum or SCCM forum.
https://social.technet.microsoft.com/Forums/scriptcenter/en-US/home?category=scripting
https://technet.microsoft.com/en-us/scriptcenter/bb410849.aspx
Thank you for your understanding and support.
Best Regards,
Daisy Zhou
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
You'll need to role your own, some of these may be a good starting point.
https://gallery.technet.microsoft.com/scriptcenter/site/search?query=find%20local%20administrators&undefined=undefined&ac=3
--please don't forget to Accept as answer if the reply is helpful--
Hello @armandothegreat ,
Thank you for posting here.
We can try the PS script in the following link.
Administrators and Powerusers on Remote Computers to excel sheet
https://gallery.technet.microsoft.com/ScriptCenter/190aadd4-01ef-4e26-8ff0-9862439f5328
Thank you for your understanding and support.
Best Regards,
Daisy Zhou
I used cmpivot in SCCM for this.