List local users and groups on any remote Windows machine — instantly. Agentless, comprehensive, and 100% free. Audit local admin accounts, spot privilege drift, and find dormant accounts across your domain.
Every feature is purpose-built for real Windows administration work — designed to save time, reduce disruption, and keep your fleet under control.
Local admin accounts are a top attack vector. This tool lists every local user, every local group, and every group membership on any domain-joined Windows machine — agentlessly. Find unauthorized admins, dormant accounts, and privilege drift before attackers do.
List every local user account on the target machine — name, full name, description, last login, account status (enabled/disabled/locked), and password-expiration policy.
Enumerate all local groups (Administrators, Remote Desktop Users, Power Users, etc.) and their members. Catch unauthorized admin elevation immediately.
Spot accounts that haven't logged in recently — common attack vectors for credential stuffing and lateral movement. Disable or remove them before they get abused.
Compare current group memberships against your security baseline. Flag every machine where the Administrators group has grown beyond approved members.
Pairs with System Inventory for full hardware + identity context, and with Currently Logged-on User to map identities to live sessions. All 15 free tools live in one console — switch contexts without losing your place.
From download to first result in five simple steps. No complex configuration, no firewall rules, no additional licensing.
Install the bundle on your admin workstation. No agent deployment, no license key required, and target computers need no software at all.
Click Users / Groups in the sidebar of the unified Free Windows Admin Tools console. The tool loads instantly alongside the other 14 utilities.
Domain-joined computers populate from Active Directory automatically — no CSV imports, no IP lists, no manual prep work.
Pick a single machine for a quick check, or bulk-select an entire organizational unit for fleet-wide privilege audits.
Browse local users, expand local groups to see members, and export findings for compliance reports and remediation tickets.
Quarterly review of local admin sprawl across servers and workstations. Identify unauthorized members of high-privilege groups and remediate before they cause damage.
Generate evidence for SOC 2, ISO 27001, PCI-DSS, and HIPAA audits — local admin lists with timestamps and group memberships, ready for your assessor.
Identify and disable accounts that haven't been used in 90+ days. Reduce your attack surface against credential-based threats and lateral movement.
When your needs scale beyond single-tool utilities, Endpoint Central delivers complete UEM — automated patching, software deployment, asset management, remote control, and endpoint security from one console. Free for up to 25 endpoints.
Yes. 100% free with no endpoint limits, trial period, or hidden costs. Part of the Free Windows Admin Tools bundle.
It lists local users and local groups (e.g., the local Administrators group), including their members. Domain users appear as members of local groups when applicable.
Username, full name, description, account status (enabled/disabled/locked), password-related flags, and last logon timestamp.
Yes. The tool uses Windows native APIs over authenticated domain credentials to enumerate local accounts and groups remotely.
This free tool is on-demand and read-only. Endpoint Central adds automated local admin rotation, LAPS-style password management, and continuous compliance — free for 25 endpoints.
Plus 16 other free Windows admin utilities in a single download. No credit card, no sign-up form.