groups with local or domain admin rights

[Guest]

I ve been tasked with identifying all groups that provide local and/or domain admin within the Microsoft Windows Active Directory environment. Any ideas on how to use hyena to get this info? We are using very latest version of hyena.

[cmccullough]

Re: groups with local or domain admin rights

For your domain admins members you can get this list by viewing the Members object for the Domain Admins.

For members of the local Administrators group on your workstations (if this is also what you need) you can:

Select your computers in Hyena's right window, then go to Tools->Exporter Pro->Export Selected Objects.
Click the Settings button, then double-click on Windows NT/Local Groups.
Check the box to Export Group Members, then enter in an output file such as c:\groups.txt.
Check the box to Only export information for groups listed in this file:
Enter in a file name such as c:\grpmembers.txt and click Edit.
Notepad should open and tell you the file doesn't exist, then ask you if you want to create it. Click Yes.
In the file enter in Administrators, then save the file and close Notepad.
Click OK, then click Close, then click Start Export.

When it is finished exporting you can open c:\groups.txt with Excel and you will see the members of the Administrators group for the selected computers.