Skip to main content

UsersGroups Data Collector

The UsersGroups Data Collector audits user and group accounts for both local and domain, extracting system policies.

Access Analyzer preconfigures the UsersGroups Data Collector within the Windows Solution. Both this data collector and the solution are available with a special Access Analyzer license. See the Windows Solution topic for additional information.

Protocols

  • RPC
  • SMBV2
  • WMI

Ports

  • TCP 135-139
  • Randomly allocated high TCP ports
  • 445

Permissions

  • Member of the Local Administrators group

    • If a less-privileged option is required, you can use a regular domain user added to the Network access: Restrict clients allowed to make remote calls to SAM Local Security Policy

  • Member of the Domain Administrators group (if targeting domain controllers)

UsersGroups Query Configuration​

You configure the UsersGroups Data Collector through the Users and Groups Browser wizard, which contains the following wizard pages:

Users and Groups Browser wizard Welcome page

You can hide the Welcome page by selecting the Don't display this page the next time box when the wizard is open and you save configuration settings.