Find computers with a specific user in local admin group

Question

I need to check if a specific domain user is a member of a local administrators group.

I prefer to use Powershell, but the problem is that we are not allowing WinRM so I can't use PSRemoting, so I can't run Get-LocalGroupMember or something.

Thanks alot for your help.

Answer 1

I recommend you to have a look on PowerView . Get-NetLocalGroup queries the information via WinNT provider or on demand via WinAPI.

Refer to harmj0y's blog for more information.