# Local Users

The `Local Users` page provides a list of enumerated local users in entire Acitve Directory. The list contains the `Computer`, `Enabled`, `RDP`, `Exec DCOM`, `Exec PWSH`, `Admin`, and `Parent Local Group`.

<figure><img src="/files/QeLBnaeBYKAEChuaEQzk" alt=""><figcaption><p>Local Users</p></figcaption></figure>

## Local User Details

Details page contains the `Risk Score` of the `Local User` ,`Exposure Point`, `Information`, and `Issues` panes.

{% hint style="info" %}
You can analyze objects in the `Graph module` by clicking the `Visualize` button on the upper left side of the `Information Pane`.
{% endhint %}

<figure><img src="/files/DoTXE5DFOZsx4724fcS3" alt=""><figcaption><p>Local User Details</p></figcaption></figure>

## Information

`Information Pane` can contain different badges to highlight important attributes.

| Badge        | Description                            |
| ------------ | -------------------------------------- |
| **Enabled**  | Indicates that the object is enabled.  |
| **Disabled** | Indicates that the object is disabled. |

Information Pane contains attributes below about local user object.

| Attribute                  | Description                                                                                                                                            |
| -------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------ |
| **Object SID**             | Local security identifier of object.                                                                                                                   |
| **Don't Require Password** | Indicates whether the local user's password can be blank.                                                                                              |
| **Non Expiring Password**  | Indicates whether the local user's password is set to never expire.                                                                                    |
| **Password Expired**       | Indicates whether the local user's password is expired and should be changed.                                                                          |
| **Parent Local Group**     | Name of the direct parent group of the local user.                                                                                                     |
| **Admin**                  | Indicates whether the local user can have admin privilege on the computer.                                                                             |
| **RDP**                    | Indicates whether the local user can have enough privilege to connect with RDP (Remote Desktop Protocol) to the computer.                              |
| **Exec DCOM**              | Indicates whether the local user can have enough privilege to execute commands with DCOM(Distributed Component Object Model) protocol on the computer. |
| **Exec Powershell**        | Indicates whether the local user can have enough privilege to execute commands with Powershell on the computer.                                        |
| **Computer**               | Name of the computer object that contains the local user.                                                                                              |

## Issues

Issues pane contains identified issues on the local user object.

![Issues](/files/ZWgd1C6tEzcXfX0lYgZP)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.forestall.io/fsprotect/ad-identities/local-users.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
