> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/search-and-reports/active-directory-entities/localgroup.md).

# LocalGroup

| Field           | Type    | Possible Operators                                             | Description                                                                                                                                             |
| --------------- | ------- | -------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Guid            | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A unique identifier that is a combination of GUID of selected `Scan` and Active Directory `ObjectGUID` of the object.                                   |
| FSName          | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | A special unique identifier that is a combination of the `Name of the object` and the `FSName of the computer` that contains local user.                |
| ObjectSid       | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Local security identifier of object.                                                                                                                    |
| Name            | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Name of the specified object.                                                                                                                           |
| can\_exec\_dcom | BOOLEAN | N/A (toggle)                                                   | Indicates whether the local group can have enough privilege to execute commands with DCOM(Distributed Component Object Model) protocol on the computer. |
| inComputerName  | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | FSName of the computer that contains the local group.                                                                                                   |
| can\_rdp        | BOOLEAN | N/A (toggle)                                                   | Indicates whether the local group can have enough privilege to connect with RDP (Remote Desktop Protocol) to the computer.                              |
| inComputerGuid  | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Guid of the computer that contains the local group.                                                                                                     |
| can\_exec\_pwsh | BOOLEAN | N/A (toggle)                                                   | Indicates whether the local group can have enough privilege to execute commands with Powershell on the computer.                                        |
| admin\_to       | BOOLEAN | N/A (toggle)                                                   | Indicates whether the local group can have admin privilege on the computer.                                                                             |
| member\_count   | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | The total count of the direct child objects.                                                                                                            |
| IsDomainGroup   | BOOLEAN | N/A (toggle)                                                   | Indicates whether the group is a Domain Group (true) defined in Active Directory or a Local Group (false) defined only on the local machine.            |
| Tier            | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Tier level Forestall assigned to the object: `0` (Tier 0), `1` (Tier 1) or `2` (Tier 2). Lower is more privileged.                                      |