Local Account Membership Auditing

We need to determine who the members are of the local Administrator's group on our domain PCs. I've got the LOCAL.EXE program from the Resource Kit, but that's a really annoying to use on a large scale. I don't really feel like writing a script and crunching through the output from some 2000 PCs.

Is anybody aware of software that can scan domain member computers in a given OU or the entire domain and generate a report?

All I've found is DesktopStandard PolicyMaker and Greyware Membership Monitor, but neither of those look like they exactly do what I want (not sure about PolicyMaker).

Any help would be great.

 

I believe SMS has this ability. But, I'm sure you want a cheap method. I've done something very similar in the past, but I wrote a script. During that time I discovered the Power of the "FOR" command.

 

We own SMS 2.0, but we don't use it. It broke some of our applications and caused instability in others (that's very, very bad in healthcare). There's a few scripts I've found online, and GFI LANguard Network Security Scanner 6.0 has the functionality, but would cost us $1,000 per administrator.

 

Wow it broke them? When I was in the military, my 3rd command bought SMS, but no one there really figured out how to use it. I'm happy to say, after a few calls with Microsoft, I was able to get it running, with no issues.

If you need help with the scripts, I might be able to help out, pending on the language.

Also, yes SMS can break machines, if the admin really doesn't know what they are doing. Typically, a corporation should have a seperate network that tests new installs and such, at least we did at the time. Every little patch, every little new program was thoroughly tested before it was distributed out to the live network.