Collect Hardware Inventory of Local Admins
We had requirements on to collect the information of only local Admins.
We already had blogs which were helping to find information of all local groups.
https://mnscug.org/blogs/sherry-kissinger/244-all-members-of-all-local-groups-configmgr-2012 .
https://myitforum.com/cs2/blogs/skissinger/archive/2010/04/25/report-on-all-members-of-all-local-groups.aspx
In the interest of collecting less data (Save space in DB) I modified the same to collect only Local admins
Steps
1) Import the Cab file
- ? Take the the attached file--> WMI Framework For Local Administrator
- ? In your ConfigMgr 12 console, on Assets and Compliance, Compliance Settings
- ? Right-click on "Configuration Baseline" and Import this file (https://technet.microsoft.com/en-us/library/hh691016.aspx )
- ? Once done deploy the baseline to the collection of machines from which you need.(https://technet.microsoft.com/en-us/library/hh219289.aspx )
2) Import the MOF file so that SMS_DEF is updated in 2012 this is how you do
- ? On the console, Administration ? Client Settings ? right-click 'Default Client Settings'?and go to properties.
- ? Select Hardware Inventory, then on the right "Set Classes.
- ? Click Import and browse to the localadmin.mof file you saved.
Content of MOF file
========================================
[ SMS_Report (TRUE),
SMS_Group_Name ("LocalAdmins"),
SMS_Class_ID ("MICROSOFT|LocalAdmins|1.0"),
Namespace ("root\\\\cimv2") ]
class Win32_LocalAdmins : SMS_Class_Template
{
[SMS_Report (TRUE), key ] string Account;
[SMS_Report (TRUE) ] string Domain;
[SMS_Report (TRUE), key ] string Name;
[SMS_Report (TRUE) ] string Type;
};
====================================================
The script use to create a WMI entry is also available in the Zip file uploaded.
=================================
Sudheesh Narayanaswamy
This posting /Script is provided "AS IS" with no warranties and confers no rights
Comments
- Anonymous
January 01, 2003
The comment has been removed - Anonymous
December 12, 2014
Hi, This is nice work. How we can check who are all in that group. Any reports? - Anonymous
December 14, 2014
Thanks - Anonymous
February 26, 2015
@Logan There are no default reports but this creates a separate view in database and hence can easily pull the information. It will be something like V_GS_Localadmins... - Anonymous
March 04, 2016
If you follow the below link and user the configuration item and get the inventory , the data will be - Anonymous
March 21, 2016
Sudheesh, will this causes any performance issue if we are running on bulk number of systems. - Anonymous
May 06, 2016
Not clear where or how to run the script.