As you have not indicated a version of LDMS you are using I am going to assume 8.8 at this point. (Although I believe the procedure is the same for LDMS v9)
You should be able to create a query that reviews the item in question and then select View as Report ( New Report in v9 )
If you create a query that has the following selected:
"Computer"."Local Users and Groups"."Local Groups"."Name" = "Administrators"
AND "Computer"."Device.Name" = "<YOUR TARGET>"
(You should only use the AND "Computer"."Device.Name" = "<YOUR TARGET>" if you want to view a specific device.)
Change your selected columns to view the columns you need to see - be sure to add "Local Users and Groups"."Local Groups"."Members"
Please note that this will show you only the local users that are members of the local administrators group on the target machine.
There is an Enchanement Request for this to show the domain accounts and groups that have also been applied to this also.
Please contact Support and request for your information to be added to ER: CR00041972: Local Users and Groups inventory attribute should include domain users and groups
The alternative to the above is to then create a custom definition to report on this information, and then report on that custom definition,
Further information on creating this can be found here: http://community.landesk.com/support/docs/DOC-6041
I hope that this helps and allows you progress this query for you.
There is also a post for this in the ER portal.
Here is a link to about how the ER portal is designed to work as well : http://community.landesk.com/support/docs/DOC-7223
Links not working.
I had to cope them into a new browser window.
Can 9.0 query or report on the domain accounts that would be in the admin group on a computer yet?
Eric, SP2 for 9.0 now reports domain accounts that are admins on the computers but it has been very inconsistent for me so far. A very small portion of our computers display the domain users. This has not been near the top of my list of things to look into until now- we are now in the beginning phase of our Win7 migration.
Sorry, but how do you do that on LANDesk 9 SP2 ?
Is it an automatic report or a specific patch security threats like LD 8 ?
I can not get consistent numbers on which is admin...
Create a Query: "Computer"."Local Users and Groups"."Local Groups"."Name"="Administrators"
Make sure the latest Monthly component Patches for the core server/agent/console are installed and it should work fine. I had issues with mine showing up correctly untill i had all the component patches installed. Hint: Best way to distribute the Agent patches is to Patch the core, then rebuild all agents and redeploy them. Found this out the hard way and a Landesk Employee let me know this little helpful hint.
I'm using LDMS 9.5 and have failed to make a query to find out, which Clients have admin rights.
the query "Computer - local users and Groups - local Groups - Name=Administrators" will Show me any Client in our Network, because the Group exists on each and every Client.
So what I would have to check is if the local user is a Member in the properties of the Group "Administrators"
thx in advance,
Someone here helped me do this a few months ago but the solution requires Data Analytics.
It requires 2 rules in DTS:
1) Map Data Rule
This creates a new data field that holds Computer.Local Users and Groups.Local Groups.Members data for the group Administrators.
2) Calculate Data rule
This creates a new field called Is Local Admin. It uses some VBS script to see if the computer.login Name field is in the new field that we created that lists all the members. It returns YES if there is a match.
Data Analytics is very powerful and can do all sorts of neat things like this.
If you have it I can upload my rules so you can see how they work.
Yeah this would totally help me - and yes we are using DTS.
thx & BR