START FREE

Unauthorized Administrators Audit

Active Directory Local Users Security Users

Find Unauthorized Administrators on Computers in Your Network

Lansweeper cross checks your approved administrators with all administrators found on the network.

Lansweeper’s on-prem configuration allows you to specify which administrators are allowed in your network. Combining this functionality with the audit, you can find administrator accounts which have not been authorized. Having local admin accounts in the hands of users can pose a severe security threat since those users are not limited in what they can do with the account, or what services running with that user’s security context can do. Discovering admin accounts is therefore critical to network security.

If you’re using Lansweeper Cloud, you can utilize the Local Admin Account Audit.

 

Computer Unauthorized Administrators Query

Select Top 1000000 tsysOS.Image As icon,
  tblAssets.AssetID,
  tblAssets.AssetName,
  tblUsersInGroup.Domainname,
  tblUsersInGroup.Username,
  tblUsersInGroup.Lastchanged,
  tblAssets.Domain,
  tblAssets.IPAddress,
  tblAssets.Description,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tblAssetCustom.Location,
  tsysIPLocations.IPLocation,
  tsysOS.OSname As OS,
  tblAssets.SP As SP,
  tblAssets.Firstseen,
  tblAssets.Lastseen
From tblUsersInGroup
  Inner Join tblAssets On tblUsersInGroup.AssetID = tblAssets.AssetID
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysOS On tblAssets.OScode = tsysOS.OScode
  Left Join tsysIPLocations On tsysIPLocations.StartIP <= tblAssets.IPNumeric And tsysIPLocations.EndIP >= tblAssets.IPNumeric
Where Not Exists(Select tblAssets.AssetName As Domain,
        tblUsers.Name As Username
      From tblAssets Inner Join tblUsers On tblAssets.AssetID = tblUsers.AssetID
      Where tblUsers.BuildInAdmin = 1 And tblUsersInGroup.Domainname =
        tblAssets.AssetName And tblUsersInGroup.Username = tblUsers.Name) And
  Not Exists(Select tsysadmins.Domain,
        tsysadmins.AdminName As username From tsysadmins
      Where tblUsersInGroup.Domainname Like tsysadmins.Domain And
        tblUsersInGroup.Username Like tsysadmins.AdminName) And
  tblUsersInGroup.Admingroup = 1 And tblAssetCustom.State = 1
Order By tblAssets.AssetName

Show

Hide

NO CREDIT CARD REQUIRED

Ready to get started?
You’ll be up and running in no time.

Explore all our features, free for 14 days.

TRY NOW TALK TO SALES