finding local admins on the network

jkstech

i thought i saw a tool once that can find the local admin accounts on your network

i'm looking for that and there was another program that you could start, then it would show you what files and directory's are being accessed, to help with file rights/permissions problems

i thought it was from winternals.com or sysinternals.com but i couldn't find it

anyone know of any other way to find out who all has local admin rights to the computers on your network

thanks

sprkymrk

I wrote a script that would enumerate local admins on all network computers and print the results to a text file. The key is an old NT4 Resource Kit utility called "local.exe". The syntax is as follows:

======================
C:\WINDOWS\SYSTEM32>local /?

Displays members of local groups on remote servers or domains.

LOCAL group_name domain_name | \\server

group_name The name of the local group to list the members of.
domain_name The name of a network domain.
\\server The name of a network server.

Examples:
Local "Power Users" EastCoast
Displays the members of the group 'Power Users' in the EastCoast domain.

Local Administrators \\BLACKCAT
Displays the members of the group Administrators on server BLACKCAT.

Notes:
Names that include space characters must be enclosed in double quotes.
To list members of global groups use Global.Exe.
To get the Server name for a give Domain use GetDC.Exe.
===========================

I'm not sure if you can still find the file on MS or not, but google may turn up the file or I can email it to you if your email client accepts .exe files.

My script used a list of computer names (there are many ways to create this list easily with VBS or Active Directory tools) but looked something like this:

FOR /f %%C in (C:\complist.txt) DO LOCAL.EXE Administrators \\%%C >> C:\localadmins.txt

Hope that helps!

Mark