local computer group membership from an OU of computers?

Question

I have been trying get get a script that will get the membership from the local computer's Administrators group by using an OU full of computers. I can return the Administrators group membership from my local computer and a list of computers from an OU, can't quite figure out how to do both with resorting to AD Users & Computers and going from computer to compute. Any thoughts.

Answer 1

Since the Administrators group is stored on each local machine's SAM database, you'll need to access each computer from your OU list and ask it to enumerate the members of it's Administrators group. This is possible to do remotely.

NetGroupGetUsers can list the users in a group for a specified server, so if you call that for the "Administrators" group on each server in your list, you'll have the memberships on each system.