The Active Directory Module for PowerShell is great. You can do almost anything with it, but every now and then you might need to list the local groups and their members on a server\/client, and that is harder…<\/p>\n
To achieve this I wrote a couple of advanced functions to simplify the task. “Get-LocalGroup” and “Get-LocalGroupMember”.<\/p>\n
The usage should be pretty simple, but to give you an idea:<\/p>\n
PS H:\\> Get-LocalGroup\r\n\r\nComputerName GroupName SID\r\n------------ --------- ---\r\nMyMachine Administrators S-1-5-32-544\r\nMyMachine Backup Operators S-1-5-32-551\r\nMyMachine Cryptographic Operators S-1-5-32-569\r\nMyMachine Distributed COM Users S-1-5-32-562\r\nMyMachine Event Log Readers S-1-5-32-573\r\nMyMachine Guests S-1-5-32-546\r\nMyMachine IIS_IUSRS S-1-5-32-568\r\nMyMachine Network Configuration Operators S-1-5-32-556\r\nMyMachine Performance Log Users S-1-5-32-559\r\nMyMachine Performance Monitor Users S-1-5-32-558\r\nMyMachine Power Users S-1-5-32-547\r\nMyMachine Remote Desktop Users S-1-5-32-555\r\nMyMachine Replicator S-1-5-32-552\r\nMyMachine Users S-1-5-32-545\r\n\r\n\r\nPS H:\\> Get-LocalGroup | where GroupName -eq Administrators | Get-LocalGroupMember\r\n\r\nDomain GroupName Type Name\r\n------ --------- ---- ----\r\nMyMachine Administrators User Administrator\r\nMyDomain Administrators Group Domain Admins\r\nMyDomain Administrators Group TheAdmins\r\n\r\n<\/pre>\n