BigFix Technical Search

Search BigFix

Summary:

Can Bigfix report the Local Administrators of a computer?

Solution:

Yes, you can create a property to determine the Local Administrators of each computer. There are three different ways to setup a retrieved property that displays this list.

1. If you are running BES 6.0 or later, the 'Local Administrators' retrieved property available here will collect the information. The property uses the following relevance expression:
   
   if ((it contains "Win" AND it != "Win98" AND it != "WinME") of name of operating system AND version of regapp "BESClient.exe" >= "6" AND exists local group "Administrators") then (members of local group "Administrators" as string) else "Unsupported Configuration"


2. If you are using BES 5.1 or lower, the following relevance expression can be used:
   
   If (exists wmi) then (string values of selects ("PartComponent from Win32_GroupUser where GroupComponent = 'Win32_Group.Domain=%22" & computer name & "%22,Name=%22Administrators%22'") of wmi) else ("N/A")


3. For BES 5.1 and lower, you may also use the Task "Create List of Local Administrators" in the BES Support site to create a list on each computer. This method does not query the WMI to retrieve the list of Local Administrators. Please read the Task description for details.