Create collection to find group members

Comments

6 comments

  • Shane Corellian

    Since you are running in Pro Mode, you can create a Report to show the info you seek. We have plans to add the ability to use Local Group membership in collection criteria.

    To illustrate: I created a report to show all the members of the Administrators group on the computer, Quagmire. I also filtered out local accounts from being displayed.

    invReport-LocalGroupMembership1.png

     

    Here are the filters that I used to narrow the returned data:

    invReport-LocalGroupMembership2.png

     

    Here is the returned data

    invReport-LocalGroupMembership3.png

     

    We are hoping to have these same filters available for Collections in the next release.

    0
    Comment actions Permalink
  • Jprater

    Now is it possible to show only computers that don't match certain criteria? For example, all of our workstations should only have three users/groups in the local administrators group: Administrator, Domain Admins, and MIS. I'd like to generate a report that will show me all the workstations where the local administrators group differs from this. Thanks!

    0
    Comment actions Permalink
  • Adam Ruth

    Yes, you can use the "does not match expression" filter type:

    Local Group Member Group equals Administrators
    Local Group Member Name does not match expression Administrator|Domain Admins|MIS

    That'll give you every user in the Administrators group that isn't one of the three values. 

    0
    Comment actions Permalink
  • Bryan

    I am in the same boat with version 3.0.4.0 Pro. Is this still not available in collections and only usable in reports?

    0
    Comment actions Permalink
  • Shane Corellian

    Hi Bryan,

    This is available in Collections. Use the Local Group Member table.  The Collection below will contain computers that have any account in the local Administrators group that is NOT called

    Administrator

    Domain Admins

    MIS

    Note that we used the comparison "Does Not Match Expression". In Regular Expressions the ^ means "Begins With" and the $ means Ends With. The pipe symbol | means Or.

    Coll-LocalGroupMember.png

     

    Literally translated these filters effectively say "Show computers with any account in the Administrators group that is not named Administrator OR Domain Admins OR MIS"

    -Shane

    0
    Comment actions Permalink
  • Bryan

    Great...thank you, Shane.

    0
    Comment actions Permalink

Please sign in to leave a comment.