The Fool fucked around with this message at 21:23 on Apr 12, 2019

<#
Script based on work of Mahdi Tehrani, modified for my needs and environment

[url]https://gallery.technet.microsoft.com/Query-members-of-Local-d0f393a6[/url]



#>

Import-module ActiveDirectory
$Path = "#<AD Path>"
$computers = #put some sort of computer collection here, or a get-adcomputer query 
$LocalGroupName = "Administrators"
$Date       = Get-Date -Format MM_dd_yyyy_HH_mm_ss

$Counter = 0
$CountPC = @($computers).count

$OutputDir = "#<path to output dir>"
$OutputFile = Join-Path $OutputDir "LocalGroupMembers$Date.csv"
Write-Verbose "Script will write the output to $OutputFile folder"
Add-Content -Path $OutPutFile -Value "ComputerName, LocalGroupName, Status, MemberType, MemberDomain, MemberName"

foreach ($computer in $computers) 
    {
        $Counter ++
        $computerName = $computer.name
		If(!(Test-Connection -ComputerName $computerName -Count 1 -Quiet)) {
			Add-Content -Path $OutputFile -Value "$computerName,$LocalGroupName,Offline"
		Continue
		} 
		else {
			try {
				$group = [ADSI]"WinNT://$computerName/$LocalGroupName"
				$members = @($group.Invoke("Members"))
				if(!$members) {
					Add-Content -Path $OutputFile -Value "$Computer,$LocalGroupName,NoMembersFound"
					Continue
				}
			}
			catch {
				Add-Content -Path $OutputFile -Value "$computerName,,FailedToQuery"
				Continue
			}

Write-Progress -Activity "Connecting PC $Counter/$CountPC " -Status "Querying ($computer)" -PercentComplete (($Counter/$CountPC) * 100)

			foreach($member in $members) {
				try {
					$MemberName = $member.GetType().Invokemember("Name","GetProperty",$null,$member,$null)
					$MemberType = $member.GetType().Invokemember("Class","GetProperty",$null,$member,$null)
					$MemberPath = $member.GetType().Invokemember("ADSPath","GetProperty",$null,$member,$null)
					$MemberDomain = $null
					If($MemberPath -match "^Winnt\:\/\/(?<domainName>\S+)\/(?<CompName>\S+)\/") {
						if($MemberType -eq "User") {
							$MemberType = "LocalUser"
						} elseif($MemberType -eq "Group"){
							$MemberType = "LocalGroup"
						}
						$MemberDomain = $matches["CompName"]
					} elseif($MemberPath -match "^WinNT\:\/\/(?<domainname>\S+)/") {
						if($MemberType -eq "User") {
							$MemberType = "DomainUser"
						} elseif($MemberType -eq "Group"){
							$MemberType = "DomainGroup"
						}
						$MemberDomain = $matches["domainname"]
					} else {
						$MemberType = "Unknown"
						$MemberDomain = "Unknown"
					}
					If ($MemberName -like "*" ) {#optional notlike  #-notlike "Domain Admins" -and $MemberName -notlike "Enterprise Admins" )	{
					Add-Content -Path $OutPutFile -Value "$computerName, $LocalGroupName, SUCCESS, $MemberType, $MemberDomain, $MemberName"
					}
				} catch {
				Add-Content -Path $OutputFile -Value "$Computer,,FailedQueryMember"
				}
    		}
		}
		}

skipdogg fucked around with this message at 18:01 on Apr 16, 2019

• Have a Windows 10 Pro PC, Azure AD joined. The Azure AD is synced from an on-premises domain. The user account (mine) doesn't exist in the on-premises domain, it's cloud only - though this doesn't seem to make a difference
  
• Unlock/log on to the PC when connected to the corporate network - this is reproducible when connected over a VPN and locking the machine when the DNS suffix and domain controllers are pushed to the client by the VPN software
  

Thanks Ants fucked around with this message at 19:35 on Apr 16, 2019

Thanks Ants fucked around with this message at 20:48 on Apr 16, 2019

Thanks Ants fucked around with this message at 01:57 on Apr 17, 2019