none
SCCM 2012 Report - Members in Local Administrators group RRS feed

  • Frage

  • Hi, 

    How to get the report for members in local administrators group for a specific group or specific collection? 

    I heard to import a custom MOF file as new hardware inventory class, then import a CAB file as a new Compliance Settings, but how to prepare that custom MOF file and CAB file?

    By the way, I am a newbie in SCCM.

    Thanks in advance! 

    Donnerstag, 19. September 2019 06:35

Antworten

  • Hello,
     
    Kindly refer to the following article.
     
    http://eskonr.com/2017/03/sccm-configmgr-report-for-local-admins-and-local-group-members/ 
     
    Hope it could help you and feel free to feedback if you there are any issues.
     
    Best Regards,
    Ray
     

    Please remembers to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Als Antwort markiert Lynn-Li Montag, 23. September 2019 06:30
    Donnerstag, 19. September 2019 06:53
    • Als Antwort markiert Lynn-Li Montag, 23. September 2019 06:30
    Donnerstag, 19. September 2019 09:00
  • It's much more than a custom hardware inventory extensions (aka a mof) or a simple report as this information must be collected by the clients first (ConfigMgr doesn't and can't magically collect everything possible from the clients). Thus, you also need to periodically run a script on all clients where you want to know this information; the script populates WMI with the desired information, the local admins in this case, and then the custom hardware extension will retrieve the info fro ConfigMgr. Finally, you can use a report to retrieve the info.

    Both Ray and Kaylan have provided links to similar solutions that perform all three custom items:

    1. Client script to collect the info in WMI

    2. Hardware extension to send the info to ConfigMgr

    3. Report to display the info sent to ConfigMgr from the database


    Jason | https://home.configmgrftw.com | @jasonsandys


    Donnerstag, 19. September 2019 14:37

Alle Antworten

  • Hello,
     
    Kindly refer to the following article.
     
    http://eskonr.com/2017/03/sccm-configmgr-report-for-local-admins-and-local-group-members/ 
     
    Hope it could help you and feel free to feedback if you there are any issues.
     
    Best Regards,
    Ray
     

    Please remembers to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Als Antwort markiert Lynn-Li Montag, 23. September 2019 06:30
    Donnerstag, 19. September 2019 06:53
    • Als Antwort markiert Lynn-Li Montag, 23. September 2019 06:30
    Donnerstag, 19. September 2019 09:00
  • It's much more than a custom hardware inventory extensions (aka a mof) or a simple report as this information must be collected by the clients first (ConfigMgr doesn't and can't magically collect everything possible from the clients). Thus, you also need to periodically run a script on all clients where you want to know this information; the script populates WMI with the desired information, the local admins in this case, and then the custom hardware extension will retrieve the info fro ConfigMgr. Finally, you can use a report to retrieve the info.

    Both Ray and Kaylan have provided links to similar solutions that perform all three custom items:

    1. Client script to collect the info in WMI

    2. Hardware extension to send the info to ConfigMgr

    3. Report to display the info sent to ConfigMgr from the database


    Jason | https://home.configmgrftw.com | @jasonsandys


    Donnerstag, 19. September 2019 14:37
  • It seems that my account doesn't have permission to import Cab file or MOF file. Button is grey out. I will cooperate with SCCM Global 'Full Administrator' for this. Anyway, thank you all!
    Montag, 23. September 2019 06:30
  • Hi i use ir and all fine but Local Administrators group contains a user with a SID instead of a proper "Domain\Username" it will incorrectly identify the username\domain of that SID user.

    Montag, 29. Juni 2020 13:48
  • SIDs are always used, however, if the SID can be resolved to a display name then it is shown instead of the SID as the SID is pretty meaningless to humans. If the SID can't be resolved to a display name, it typically means the account no longer exists although it can also mean that the domain can't be contacted to resolve the SID to the display name of principal.

    Jason | https://home.configmgrftw.com | @jasonsandys

    Montag, 29. Juni 2020 17:29