Skip to content

LocalUser

Copy page
Field Type Possible Operators Description
Guid TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY A unique identifier that is a combination of GUID of selected Scan and random GUID.
FSName TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY A special unique identifier that is a combination of the Name of the object and the FSName of the computer that contains local user.
ObjectSid TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY Local security identifier of object.
Name TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY Name of the specified object.
IsEnabled BOOLEAN N/A (toggle) Indicates whether the user is enabled.
HasNonExpiringPassword BOOLEAN N/A (toggle) Indicates whether the object’s password is set to never expire.
DontReqPasswd BOOLEAN N/A (toggle) Indicates whether the object’s password can be blank.
HasLocalService BOOLEAN N/A (toggle) Indicates whether the object has managing local services (without SPN).
can_rdp BOOLEAN N/A (toggle) Indicates whether the local user can have enough privilege to connect with RDP (Remote Desktop Protocol) to the computer.
can_exec_pwsh BOOLEAN N/A (toggle) Indicates whether the local user can have enough privilege to execute commands with Powershell on the computer.
admin_to BOOLEAN N/A (toggle) Indicates whether the local user can have admin privilege on the computer.
can_exec_dcom BOOLEAN N/A (toggle) Indicates whether the local user can have enough privilege to execute commands with DCOM(Distributed Component Object Model) protocol on the computer.
inComputerName TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY FSName of the computer that contains the local user.
inLocalGroupName TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY FSName of the local group that contains the local user.
inComputerGuid TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY Guid of the computer that contains the local user.
IsPasswordExpired BOOLEAN N/A (toggle) Indicates whether the object’s password is expired and should be changed.
risk NUMBER EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL The risk score of the object that calculated based on vulnerability counts and severities.
inLocalGroupGuid TEXT LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY Guid of the local group that contains the local user.
IsDomainUser BOOLEAN N/A (toggle) That indicates whether a user account belongs to a domain or is a local account.
ExposurePoint NUMBER EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL ExposurePoint: A numerical value indicating the level of risk or exposure.
Tier NUMBER EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL Tier level Forestall assigned to the object: 0 (Tier 0), 1 (Tier 1) or 2 (Tier 2). Lower is more privileged.

Was this page helpful?

Thank you for your feedback.