<< Back to Script Library

List local Administrators

Will return a list of local Administrators on selected PC
Version: 2.1.4
Created: 2019-02-13
Modified: 2019-07-02
Creator: ben.bonnette
Downloads: 206
The Script Copy Script Copied to clipboard
$ErrorActionPreference = 'Stop'
#requires -version 5.1

    Lists the local adminsitrators

    Gets the local administrators by querying the Local Adminsitrator group on the target machine

    - To check is somebody has administrator rights on a machine
    - To check there are not too many local administrators
    Based on a community script submission from Ben Bonnette

    Requires PS 5.1 to be available on the target machine.
    Context: This script can be triggered from: Computer
    Modification history: 29062019 - Ton de Vreede - Added simple error handling and changed the output replace the name of the local machine to 'LOCAL', so this script can also be used to compare local admins on machines (otherwise when running on multiple targets each machine gets its won output pane).


# Get the local machine name
[string]$strComputerName = "$([System.Environment]::ExpandEnvironmentVariables('%COMPUTERNAME%'))\"

# Try to get the local administrator group members. REPLACING THE LOCAL COMPUTER NAME WITH 'LOCAL'!
try {
    Get-LocalGroupMember -Group Administrators | Select-Object ObjectClass, @{Label = 'Name'; Expression = { ($_.Name).replace($strComputerName, 'LOCAL\') } }, PrincipalSource
catch {
    Write-Host "The local Administrators group members could not be retreived. Exception detail:`n$_"