0 votes

It would be great if we could run a report on an OU and get the following information:

  1. Computer Name
  2. Local Accounts
  3. Whether or not the account is an administrator
  4. Whether or not the account is disabled
  5. Maybe local group memebership for the user would be nice too, but this is less important.

Thanks in advance. Your support team is great and appreciated.

by (80 points)


It is possible to generate such a report. However, it will not work for a large amount of computers as each will require a separate connection to be established. Also, please, provide us with a live example of the desired report. The thing is that report columns do not support multiline output meaning that multiple local accounts and their data cannot be placed in a single column.


This is the gist of what I'd love to see, except modified to run on an OU. There's only really 3 OUs I'd ever run this on and the largest is around 50 servers.

PS C:\Windows\system32> Invoke-Command -ComputerName SERVER1 -ScriptBlock{Get-LocalGroupMember -Name 'Administrators'} | Select-Object -Property PSComputerName, Name, PrincipalSource, ObjectClass
PSComputerName  Name                    PrincipalSource ObjectClass
--------------  ----                    --------------- -----------
SERVER1         DOMAIN\Domain Admins    ActiveDirectory Group
SERVER1         DOMAIN\Admin1           ActiveDirectory User
SERVER1         DOMAIN\Admin2           ActiveDirectory User
SERVER1         DOMAIN\Admin3           ActiveDirectory User
SERVER1         SERVER1\Administrator   Local           User

Thank you in advance for considering this.


Sorry for the confusion. In your original post you mentioned that you would like to include all local accounts in the report. However, in your example, only the members of the local Administrators group are included. Please clarify which behaviour you would like to implement.

Also, Adaxes will use the Microsoft.PowerShell.LocalAccounts PowerShell module to query local groups and users. Is it guaranteed that this module will be installed on each computer you need to generate the report for, or the module might not be installed on some computers?

Finally, the report can include the local group membership of each local user, but the report columns don't support multi-line or multi-value output. This means that the names of the local groups will have to be listed in a custom column, separated by semicolon or another separator. Please confirm whether this solution meets your needs or not.

Please log in or register to answer this question.

Related questions

0 votes
1 answer

I need a list of all the URLs that Adaxes creates in IIS on the server Adaxes is installed on.

asked Feb 6, 2020 by DaralenManta (20 points)
0 votes
1 answer

We have four OUs in Active Directory (Pending Deletion, Disabled with Mail Delegates, Disabled with HR Extensions and Disabled_Temp_Leave) that users are moved to prior to their eventual ... past 7 days have been moved to one of 4 of these OUs. Thanks!

asked Jun 3 by RayBilyk (180 points)
0 votes
1 answer

I'd like to be able to either send an email report or export a CSV of all of the business rules carried out when a user is disabled. This would be ... Management Activity section but this includes things that weren't part of the disable operation. Thanks

asked Feb 19, 2020 by bavery (150 points)
0 votes
1 answer

Hello, we want to setup a scheduled report with all our teams (security groups) and their respective team-leader (specified in "managedBy" of security group). I get the name of ... the team-leader. And this is my problem... Can you help me with this problem?

asked Oct 9, 2020 by lohnag (100 points)
0 votes
1 answer

Hi, Can you tell me how to look up a list of last logged-in users for computers from specific OU? Have OU called Laptops and need to know who as last person logged into ... username-of-last-user-who-lgged-on-to-computer-s269.htm but it' s not design for OU

asked Dec 2, 2019 by roberttryba (70 points)
2,556 questions
2,297 answers
667,886 users