Query Details

Show All Local Groups On Device

Query

No standalone KQL detected in this source

View source on GitHub

About this query

// Use Case: Show all locally available User Groups including Privileged Groups LocalGroup

Explanation

This query is designed to retrieve and display all user groups that are locally available on a system, including those that have elevated privileges. The LocalGroup table or dataset is being queried to list these groups. Essentially, it's a way to see all the user groups on a local machine, with a focus on identifying any groups that have special or administrative permissions.