Documentation › Using Steward IT Census
Users & administrators
Users#
Users combines everyone known to Steward IT Census:
- people seen logging on to computers (from the logged-on user and user profiles collected by inventory)
- accounts from Active Directory, with name, email, department, title and enabled status
Open a user to see their AD details and group memberships, the computers they have used (first and last seen), and the assets assigned to them (the Assigned user field on an asset's Manage tab).
Each computer's Users & groups tab shows the reverse: every user who has logged on, when, and the local groups; its Summary tab lists each sign-in of the last 7 days.
Reports: Last logged-on users, Users and the computers they use, AD users not logged on for 90 days.
Authorized administrators#
Configuration › Authorized admins lists the accounts and groups that are allowed to have administrator rights. Everything else is flagged.
What counts as an administrator#
- members of a computer's local Administrators group (Windows), or sudo / wheel / admin (Linux, macOS)
- members of privileged AD groups: Domain Admins, Enterprise Admins, Schema Admins, Administrators, Account / Backup / Server / Print Operators, DnsAdmins, Group Policy Creator Owners, Key Admins and Enterprise Key Admins
Adding authorized entries#
| Entry | Matches |
|---|---|
CORP\jdoe |
That account everywhere |
CORP\Domain Admins |
The group where it appears inside local Administrators groups |
Administrator |
No backslash: that name on any computer or domain (every machine's built-in Administrator) |
CORP\it-* |
Wildcard: every account starting with it- |
Matching is case-insensitive. The page also lists every administrator currently found, marked authorized or unauthorized, with one-click Authorize buttons. That's the fastest way to build the list: review it once, authorize the legitimate ones, and you're done. Add common defaults adds Administrator and *\Domain Admins.
Staying on top of it#
- Report: Unauthorized administrators.
- Dashboard: Needs attention shows the count.
- Alert: Unauthorized administrators found emails a digest on your schedule.