Nexthink Recognized by SIIA as the Best Digital Employee Experience Platform Learn more

Learn more

Learn more

cookie alert

We use cookies to offer you a better browsing experience, analyze site traffic, personalize content, and serve targeted advertisements. If you continue to use this site, you consent to our use of cookies.

Nexthink Library

User Access Control

Back

User Access Control

Latest Version: 2.0.3.0
|
Updated on February 28, 2024
Install

Description

This Library pack is composed of Remote Action scripts which help improving the compliance level by enforcing User Access Control to be enabled, and listing members of Administrator group filtered by provided whitelist.Please use the link on the left menu to learn more about the function and range of action of the script.

Versions

  • 2.0.3.0 - 28 Feb 2024 - Updated OS requirements
  • 2.0.2.0 - 22 Jul 2022 - Fixed PATH and changed documentation of Enable User Access Control Remote Action v1.0.1.0
  • 2.0.1.0 - 22 Jul 2019 - Fixed output management of Get-LocalAdministrators Remote Action
  • 2.0.0.0 - Added Get-LocalAdministrators Remote Action
  • 1.0.0.0 - Initial release

Content

Campaigns - 1
Remote actions - 2
Enable User Access Control Get Local Administrators

Required Products

Nexthink Act
Nexthink Engage

Platforms

Windows 7 and newer

Compatibility

V6.14 and later

This Might Interest You

Workflow: Windows 11 migration
New

Orchestrate the Windows 11 migration process with automated compatibility checks and pre-to-post migration user engagement.

Released on April 11, 2024
View Library Pack

Workflow: Device assignment verification
New

Orchestrate the verification and update of device assignee information in the ServiceNow Hardware Asset Management database through a dedicated workflow.

Released on April 10, 2024
View Library Pack

Enable User Access Control

Script Description

Checks if User Access Control is enabled, and enables it if it is not.When User Access Control is set to its minimum level, it is not considered deactivated.

Execution context and suggested scheduling

Run the script as 'local system'. The script should be executed manually.

A timeout of 120 seconds is recommended.

Parameters

Label Description
Campaign Id ID of the campaign to notify user that the device must be restarted

Outputs

None.

Further Information

The device must be restarted after this action for the changes to take effect.

Get Local Administrators

Script Description

Obtains a list and total number of identities (local and domain users or groups) who are members of the target device Administrators group, filtered by provided whitelist.

Execution context and suggested scheduling

Run the script as 'local system'. The script should be executed manually.

A timeout of 120 seconds is recommended.

Parameters

Label Description
Whitelist Optional list of identities (users and groups) to be excluded from the data obtained. Multiple values are comma-separated. Example values are "DOMAIN\User, Admin, Local Admin, Admin Group"

Outputs

Label Type Description
Local Identities StringList List of local identities (users and groups) added to Administrators group
Domain Identities StringList List of domain identities (users and groups) added to Administrators group
Total Identities Int Total number of identities (users and groups) added to Administrators group, excluding the ones present in the whitelist

Test Scenarios

Success
Test Case The script execution is successful and data is displayed in Finder as custom fields
Environment Windows 10 x86/x64 (1803/1809/1903) - Windows 7 x86/x64 (Multi-language)
Results Success - Script is executed with an empty Whitelist LocalIdentities and DomainIdentities are retrieved without skipping/ignoring any identity
Success - Whitelist contains values that were not found in Administrators group LocalIdentities and DomainIdentities are retrieved without skipping/ignoring any identity
Success - Whitelist contains an identity name (either local or domain name) that is currently added to Administrators group DomainIdentities and DomainIdentities are, skipping the given identities matching against the Whitelist
Success - there are no domain users/groups addedd as Administrators DomainIdentities will be empty, and will be displayed as "-" in Finder
Failure
Test Case The script execution fails and throws an exception due to invalid input
Environment Windows 10 x86/x64 (1803/1809/1903) - Windows 7 x86/x64 (Multi-language)
Results Failure - The Whitelist contains a value with more than 20 characters Exception is thrown and script exit code is 1
Failure - The Whitelist contains a value with invalid characters Exception is thrown and script exit code is 1