Harmony Endpoint - Compliance - Regedit for admin rights

[jfernandezm]

Hi Everyone!

I'm exploring the Compliance blade on CHeckpoint Harmony Endpoint, and i'm looking for detection of every user on the organizacion who had admin privileges /rights on his user account. 

I was checking if any register on regedit could be matched with the compliance blade to detect this.

Thanks for your help!

[PhoneBoy]

The canonical source for this information would be Active Directory.
Why are you querying it on the individual PC?

I assume somewhere in HKEY_CURRENT_USER there is some indication of the user permission level.
However, that's probably more of a Microsoft question.

[lluner]

hi 

Could use a powershell script and send the admin users to a database