How to get the users in the local Administrators group by SCCM ?

by

My manager wants to know which users have local admin rights on the workstation for audit purpose, but SCCM doesn't have this build in function. Thanks for the internet, here is an article on how to get this working:

http://mnscug.org/blogs/sherry-kissinger/17-system-center/config-mgr-2012/244-all-members-of-all-local-groups-inventory-for-configmgr-2012

 

Basically here is steps:

  1. Import a custom MOF file as new hardware inventory class;
  2. Import a CAB file as a new Compliance Settings and deploy to the collection you want to monitor ( I used all workstation collection);

And how you can use it?

Just build a query from Attribute class  – Local Group Members.

 

local group members in sccm

Leave a Comment