That video will help you become a guru, but what you are trying to do unfortunately does not work. We have found that when an account is added to a local group it us usually a domain account. When the inventory scanner runs it runs as local system and can only gather local account information, but not the domain account information. If were have alerting setup the alert change would not appear in this case.
So for example if you add a domain account Jon Doe to the local administrators group and then ran a full inventory scan the inventory does not show any domain users/groups added to the local administrators group because the information gathered is only for local users and groups.
Although noticing domain users who are added to the local Administators group would be ideal, our main concern is non-domain accounts.
I wonder if it would notice domain users when combined with Jack Coates' ldms_client inventory extender (www.droppedpackets.org)?
You could probably cook something up via tracking inventory history and either something like Jack Coates' tool or just a simple VBScript that reads out the local users of the groups you want to keep track off, and sends this info through to the Core as custom data.
Since you can track inventory history on nearly anything, that should do the trick for you (since the addition of a person would add a change to the data, which would trigger inventory history if you're tracking it).
- Paul Hoffmann
LANDesk EMEA Technical Lead