Sign in
 
Home2012Previous VersionsLibraryForumsGallery
System Center TechCenter >
> 
> 
Check Admin Rights on Workstations

Answered Check Admin Rights on Workstations

  • Monday, May 21, 2012 9:47 AM
     
     
    Sign In to Vote
    0

    Hi All,

    I have a small query.In my environment we have more than 30,000 clients.I need to know what are the machines is having admin rights (C$ and admin$).

    is there any WQl query.can any one help me on this.. 

    just let me check will share you with the result.

    Stephene

     

All Replies

  • Monday, May 21, 2012 11:26 AM
     
     
    Sign In to Vote
    0

    Hi,

    until you dont have any GPO or port/firewall(File and Print Sharing needed) to disable admin$ share,it will be accessble .

    It would be difficlt to check on all machines if admin$ share is enabled but there are tools to check if admin$ enabled but that is tedious job really..

    if you are looking for SCCM report(SQL) or collection(WQL) ,you will have to edit SMS_DEF.MOF file and change shares name to get these detials.

    [ SMS_Report     (FALSE),
      SMS_Group_Name ("Shares"),
      SMS_Class_ID   ("MICROSOFT|SHARE|1.0")

    Please click on "vote as Helpful" if you feel this post helpful to you.

    Eswar Koneti | My Tech blog: www.eskonr.com | Linkedin: Eswar Koneti

     
  • Monday, May 21, 2012 2:30 PM
     
     Answered
    Sign In to Vote
    0
    This is a perfect and simple task for DCM as it's completely dictated by a single registry value: http://www.petri.co.il/disable_administrative_shares.htm

    Jason | http://blog.configmgrftw.com | Twitter @JasonSandys