0 votes

It would be great if we could run a report on an OU and get the following information:

  1. Computer Name
  2. Local Accounts
  3. Whether or not the account is an administrator
  4. Whether or not the account is disabled
  5. Maybe local group memebership for the user would be nice too, but this is less important.

Thanks in advance. Your support team is great and appreciated.

by (80 points)


It is possible to generate such a report. However, it will not work for a large amount of computers as each will require a separate connection to be established. Also, please, provide us with a live example of the desired report. The thing is that report columns do not support multiline output meaning that multiple local accounts and their data cannot be placed in a single column.


This is the gist of what I'd love to see, except modified to run on an OU. There's only really 3 OUs I'd ever run this on and the largest is around 50 servers.

PS C:\Windows\system32> Invoke-Command -ComputerName SERVER1 -ScriptBlock{Get-LocalGroupMember -Name 'Administrators'} | Select-Object -Property PSComputerName, Name, PrincipalSource, ObjectClass
PSComputerName  Name                    PrincipalSource ObjectClass
--------------  ----                    --------------- -----------
SERVER1         DOMAIN\Domain Admins    ActiveDirectory Group
SERVER1         DOMAIN\Admin1           ActiveDirectory User
SERVER1         DOMAIN\Admin2           ActiveDirectory User
SERVER1         DOMAIN\Admin3           ActiveDirectory User
SERVER1         SERVER1\Administrator   Local           User

Thank you in advance for considering this.


Sorry for the confusion. In your original post you mentioned that you would like to include all local accounts in the report. However, in your example, only the members of the local Administrators group are included. Please clarify which behaviour you would like to implement.

Also, Adaxes will use the Microsoft.PowerShell.LocalAccounts PowerShell module to query local groups and users. Is it guaranteed that this module will be installed on each computer you need to generate the report for, or the module might not be installed on some computers?

Finally, the report can include the local group membership of each local user, but the report columns don't support multi-line or multi-value output. This means that the names of the local groups will have to be listed in a custom column, separated by semicolon or another separator. Please confirm whether this solution meets your needs or not.

Please log in or register to answer this question.

Related questions

0 votes
1 answer

I need a list of all the URLs that Adaxes creates in IIS on the server Adaxes is installed on.

asked Feb 6, 2020 by DaralenManta (20 points)
0 votes
1 answer

For security purposes, we need to audit the objects that are capable of replicating the directory. As we have a number of individuals that need this report, I would like to ... four domains and would like to see any objects with this permission in any of them

asked May 20 by jiambor (1.2k points)
0 votes
1 answer

Hello, I am trying to find out if it would be possible to create a tool/ process on Adaxes that will allow me to create a new AD user and set a time limit on the ... or guides on how i might create a new users or set deletion / disable times? Thanks Rhys

asked Nov 9, 2021 by R_C (70 points)
0 votes
1 answer

We have four OUs in Active Directory (Pending Deletion, Disabled with Mail Delegates, Disabled with HR Extensions and Disabled_Temp_Leave) that users are moved to prior to their eventual ... past 7 days have been moved to one of 4 of these OUs. Thanks!

asked Jun 3, 2021 by RayBilyk (220 points)
0 votes
1 answer

I'd like to be able to either send an email report or export a CSV of all of the business rules carried out when a user is disabled. This would be ... Management Activity section but this includes things that weren't part of the disable operation. Thanks

asked Feb 19, 2020 by bavery (250 points)
2,807 questions
2,541 answers
65,149 users