Listing built-in administrator group members
When listing discovered administrators or groups , agtdos writes output to file in the <instance>\psconfig\ directory.
For versions 12.0.0 or later, the output must be in SQLite table format. It is written to the <target id>.db file and must include the following:
Table 1.
agtdos discobj table output for administrators or groupsstableid | type | longid | shortid | displayid | sd |
|---|---|---|---|---|---|
<GUID> | COMP | <GUID> | <computer name> | <computer name> | |
SID of user | type | SID of user | <description> | <description> |
Table 2.
agtdos discobjattr table output for administrators or groupsstableid | type | attrkey | attrval | seqno |
|---|---|---|---|---|
SID of user | type | sid-usr | <SID of user> | 0 |
SID of user | type | sid-grp | <SID of user> | 0 |
SID of user | type | domain | <Domain ID> | 0 |
SID of user | type | islocal | <local account 1|0> | 0 |
Table 3.
agtdos discobjrel table output for administrators or groupsparent_stableid | parent_type | reltype | child_stableid | child_type | child_name | |
|---|---|---|---|---|---|---|
SID of user | parent_type | SUB | <Full user ID> eg, Domain>\<account ID> | ACCT | <child_name> | <child_sd> |