Local Groups

Copy page

Open Unified Identities › Group, filter Providers to Active Directory › Local Group, then select a row to open its details.

Local Group Details

Opening a local group shows the Information pane. An Issues pane is shown only when the local group has issues. Local groups have no risk score or badges.

You can analyze the object in the Graph by clicking the Graph » button next to the Information title.

Information

Information Pane contains Details, Groups, Users, Computers, Local Groups, Local Users, MSAs, GMSAs and DMSAs tabs respectively.

Details

Details tab contains attributes below about local group object.

Attribute	Description
Object SID	Local security identifier of object.
Parent Local Group	Name of the direct parent group of the local group.
Computer	Name of the computer object that contains the local group.
Admin	Indicates whether the local group can have admin privilege on the computer.
RDP	Indicates whether the local group can have enough privilege to connect with RDP (Remote Desktop Protocol) to the computer.
Exec DCOM	Indicates whether the local group can have enough privilege to execute commands with DCOM(Distributed Component Object Model) protocol on the computer.
Exec Powershell	Indicates whether the local group can have enough privilege to execute commands with Powershell on the computer.

Groups

Groups tab contains a list of groups that are children of the local group. This list also contains Privileged and Admin columns to identify the privilege levels of these groups.

Users

Users tab contains a list of users that are children of the local group. This list also contains Enabled column to identify the status of these users.

Computers

Computers tab contains a list of computer that are children of the local group. This list also contains IP Address column to identify the network addresses of these computers.

Local Groups

Local groups tab contains a list of local groups that are children of the local group.

Local Users

Local users tab contains a list of local users that are children of the local group.

MSAs

MSAs tab contains a list of managed service accounts that are children of the local group. This list also contains Enabled column to identify the status of these accounts.

GMSAs

GMSAs tab contains a list of group managed service accounts that are children of the local group. This list also contains Enabled column to identify the status of these accounts.

DMSAs

DMSAs tab contains a list of delegated managed service accounts that are children of the local group. This list also contains Enabled column to identify the status of these accounts.