Local Admin Audit

Script Actions

Credibility

Verified by OperatorOS

Local Admin Audit is part of the official OperatorOS ScriptForge catalog. It has been reviewed for metadata completeness, safety scan results, PowerShell compatibility, and technician-facing documentation.

Script Body

# OperatorOS ScriptForge imported Xodus library script
# Workbook ref: SCR-024
# Title: Local Admin Audit
# Category: Security / Endpoint
# Ready state: Ready
# Workbook risk: low
# Body type: PowerShell / Command Block

$OperatorOSFrameworkCandidates = @(
    (Join-Path -Path $PSScriptRoot -ChildPath '..\..\..\framework\OperatorOS-ScriptFramework.psm1'),
    (Join-Path -Path $PSScriptRoot -ChildPath '..\..\..\..\framework\OperatorOS-ScriptFramework.psm1')
)
$OperatorOSFrameworkPath = $OperatorOSFrameworkCandidates | Where-Object { Test-Path -LiteralPath $_ } | Select-Object -First 1
if ($OperatorOSFrameworkPath) {
    Import-Module $OperatorOSFrameworkPath -Force
}

$ErrorActionPreference = 'Stop'

Get-LocalGroupMember -Group "Administrators" |
Select-Object Name, ObjectClass, PrincipalSource

Requirements

• Windows PowerShell 5.1 or newer for Windows Endpoint.
• Required tooling: PowerShell.
• Recommended run context: PowerShell/RMM.

Parameters

No parameters documented.

Examples

./security-endpoint-local-admin-audit.ps1

Changelog

1.0.0 - Imported from Xodus / OperatorOS Script Library workbook with OperatorOS metadata, redaction notes, and framework bootstrap.