Recursively Enumerate Local Administrator Group

Posted on March 30, 2012January 3, 2021 by Alan

Getting a list of the local administrators is a routine security task. A popular way to do this is with EnumLocalGroup.vbs, a script written by Richard Mueller. I found that this has some error handling issues, especially where you have the problem of a nested group which creates a recursion loop.

EnumAdmins.vbs is my version of this file. Enumeration failures are logged. It only runs locally.

2 thoughts on “Recursively Enumerate Local Administrator Group”

JProvencher says:

February 26, 2013 at 11:14 AM

Hi Alan,

Is it possilble to run this for remote machines, or would it have to be run from each machine individually.
Alan says:

February 26, 2013 at 6:08 PM

I do have a program to do this, but I will need to review it to see that it does not have any information about our infrastructure before releasing it.

You must be logged in to post a comment.

All the scripts are saved as .txt files. Newer files have a “View Script” button which will let you save or open a script in notepad. For earlier posts, the easiest way to download with IE is to right click on the link and use “Save Target As”. Rename file from Name_ext.txt to Name.ext.

To see a full post after searching, please click on the title.

PowerShell Scripts were written with version 3 or later.

https connections are supported.

All new users accounts must be approved, as are comments. Please be patient. If you find a post error or a script which doesn’t work as expected, I appreciate being notified. My email is my first name at the domain name, and you are welcome to contact me that way.

2 thoughts on “Recursively Enumerate Local Administrator Group”

Leave a Reply