Show All Local Groups On Device
Query
No standalone KQL detected in this source
View source on GitHubAbout this query
// Use Case: Show all locally available User Groups including Privileged Groups LocalGroup
Explanation
This query is designed to retrieve and display all user groups that are locally available on a system, including those that have elevated privileges. The LocalGroup table or dataset is being queried to list these groups. Essentially, it's a way to see all the user groups on a local machine, with a focus on identifying any groups that have special or administrative permissions.