local administrators enumeration

[Guest]

dumpsec allowed the enumeration of the local groups. Unfortunately it seemed kind of buggy as it didn't enumerate them all, sometimes a few groups did not show its users. What I mean by this is, if DOMAIN\Domain Admins was part of the local Administrators group, it would expand it and show all the users there. So you'll see DOMAIN\Domain Admins and any associated users in it listed below.

I'm looking for a similar method in hyena and/or exporter pro but I cannot find this.

does anyone know how to export and expand all local administrators?

thank you

[cmccullough]

Re: local administrators enumeration

Exporter Pro can be used to export the members of the Administrators groups on your computers, but it wouldn't be able to expand groups that are found there.

You'll select the computers you want in Hyena, then go to Tools->Exporter Pro->Export Selected Objects. Click the Settings button and configure the export for Windows NT/Local Group Members.

You'll enable it and at the bottom you can give it a file with the groups you want to export (in your case Administrators).