Remote Monitor Series: Bringing back a list of local accounts on a machine

gavsto2018-12-05T22:24:12+00:00December 5th, 2018|

This is a simple one for today – useful for having a monitor to check for accounts that should not be there as local users.

"%windir%\System32\WindowsPowerShell\v1.0\powershell.exe" -noprofile -command "& {(Get-WmiObject -Class Win32_UserAccount -Filter  \"LocalAccount='True'\" | Select -expandproperty name) -join \",\"}"

1	"%windir%\System32\WindowsPowerShell\v1.0\powershell.exe" -noprofile -command "& {(Get-WmiObject -Class Win32_UserAccount -Filter \"LocalAccount='True'\" \| Select -expandproperty name) -join \",\"}"