Author Posts

January 24, 2018 at 10:07 pm

I'm having the toughest time finding the “authenticated users” group (well, its not technically a group) with PowerShell. Has anyone been successful with this?

January 25, 2018 at 4:32 am

Remember, there is stuff that PoSH can do, and stuff PoSH can use, and stuff PoSH can call. So, even if X or Y isn't native to PoSH, does not mean it can use it or it should not be used.

For example, to get the current logged on user group info, either use whoami natively or called in a PoSH scripts.

whoami /ALL /FO CSV

"User Name","SID"
...

"Group Name","Type","SID","Attributes"
"Everyone","Well-known group","S-1-1-0","Mandatory group, Enabled by default, Enabled group"
"BUILTIN\Administrators","Alias","S-1-5-32-544","Mandatory group, Enabled by default, Enabled group, Group owner"
"BUILTIN\Users","Alias","S-1-5-32-545","Mandatory group, Enabled by default, Enabled group"
"BUILTIN\Certificate Service DCOM Access","Alias","S-1-5-32-574","Mandatory group, Enabled by default, Enabled group"
"BUILTIN\Pre-Windows 2000 Compatible Access","Alias","S-1-5-32-554","Mandatory group, Enabled by default, Enabled group"
"NT AUTHORITY\REMOTE INTERACTIVE LOGON","Well-known group","S-1-5-14","Mandatory group, Enabled by default, Enabled group"
"NT AUTHORITY\INTERACTIVE","Well-known group","S-1-5-4","Mandatory group, Enabled by default, Enabled group"
"NT AUTHORITY\Authenticated Users","Well-known group","S-1-5-11","Mandatory group, Enabled by default, Enabled group"

It, like any other script / programming language, will not do what you are asking for out of the box. You have to tell it.

So, you have not shown use what you've tried so far, and/or any errors you had in your attempts. Please provide that so we can do what we can to assist where we can.

What are you trying to do to / with the group?