How to collect a list of all windows servers/hosts in a specific domain which are allowing domain users to have local administrative privileges?

[Akunec]

Hello Team,
I'm looking to collect a list of all windows servers/hosts in a specific domain that is allowing domain users to have local administrative privileges.

Is that searchable?

Thanks

[hos_2]

Hey Akunec,

Have a look at https://docs.splunk.com/Documentation/SA-LdapSearch/2.1.6/User/Theldapsearchcommand