Unauthorized Administrators Audit

Find Unauthorized Administrators on Computers in Your Network

Lansweeper cross checks your approved administrators with all administrators found on the network. Lansweeper's configuration allows you to specify which administrators are allowed in your network. Combining this functionality with the audit, you can find administrator accounts which have not been authorized. Having local admin accounts in the hands of users can pose a severe security threat since those users are not limited in what they can do with the account, or what services running with that user's security context can do. Discovering admin accounts is therefore critical to network security.

 

Click to Open - Computer Unauthorized Administrators Query
Select Top 1000000 tsysOS.Image As icon,
  tblAssets.AssetID,
  tblAssets.AssetName,
  tblUsersInGroup.Domainname,
  tblUsersInGroup.Username,
  tblUsersInGroup.Lastchanged,
  tblAssets.Domain,
  tblAssets.IPAddress,
  tblAssets.Description,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tblAssetCustom.Location,
  tsysIPLocations.IPLocation,
  tsysOS.OSname As OS,
  tblAssets.SP As SP,
  tblAssets.Firstseen,
  tblAssets.Lastseen
From tblUsersInGroup
  Inner Join tblAssets On tblUsersInGroup.AssetID = tblAssets.AssetID
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysOS On tblAssets.OScode = tsysOS.OScode
  Left Join tsysIPLocations On tsysIPLocations.StartIP <= tblAssets.IPNumeric And tsysIPLocations.EndIP >= tblAssets.IPNumeric
Where Not Exists(Select tblAssets.AssetName As Domain,
        tblUsers.Name As Username
      From tblAssets Inner Join tblUsers On tblAssets.AssetID = tblUsers.AssetID
      Where tblUsers.BuildInAdmin = 1 And tblUsersInGroup.Domainname =
        tblAssets.AssetName And tblUsersInGroup.Username = tblUsers.Name) And
  Not Exists(Select tsysadmins.Domain,
        tsysadmins.AdminName As username From tsysadmins
      Where tblUsersInGroup.Domainname Like tsysadmins.Domain And
        tblUsersInGroup.Username Like tsysadmins.AdminName) And
  tblUsersInGroup.Admingroup = 1 And tblAssetCustom.State = 1
Order By tblAssets.AssetName

Audit and Take Action in 3 Easy Steps

Download-Install-Lansweeper

1. Download & Install Lansweeper

Save-and-Run-the-Report

3. Run the Audit & Take Action

Download Lansweeper to Run this Audit

Harness the Power of Reporting