List Local administrators on a machine using Powershell, ADSI

Posted on by

I need to audit our local administrators group.  I wanted to convert my script to Powershell that I’ve used for years. I found the magic post here that shows the core syntax.  I wouldn’t have guessed the syntax in a dozen years. 


Here is the VBScript.


Set objGroup = GetObject(“WinNT://./Administrators,group”)

    For Each objUser In objGroup.Members
        WScript.Echo “Member found: ” & objUser.Name
    Next

set objGroup = Nothing

Here is the Powershell syntax.


function LogToFile ([string]$strFileName, [string]$strComputer)
{
 Add-Content $strFileName $strComputer
}


$strComputer = “.”
$computer = [ADSI](“WinNT://” + $strComputer + “,computer”)
$Group = $computer.psbase.children.find(“Administrators”)
$members= $Group.psbase.invoke(“Members”) | %{$_.GetType().InvokeMember(“Name”, ‘GetProperty’, $null, $_, $null)}


ForEach($user in $members)


{
Write-Host $user
$a = $strComputer + “!” + $user.ToString()
LogToFile “C:ss.txt” $a
}


Thanks to Ying Li!


Cheers,


Steve

4 thoughts on “List Local administrators on a machine using Powershell, ADSI”

  1. Thanks for saving my life with this ?

    where did you get the “psbase” from? I didn’t find this approach in any other site.

    Anyway, thanks again.

  2. Hi,

    how can I run this for multiple computers and save the oupt to a txt file or csv? I also like to repeat the machine name on every line. Thank you

    Yasser

  3. Hi ,
    iam new to powershell can any one tell me how to create user in localadmin group not in domain

  4. Oh goodie, a list of group names that we still have to go locate and enumerate. You’ve saved us about 10% of our work here.

Comments are closed.