-
Notifications
You must be signed in to change notification settings - Fork 162
Open
Description
To Reproduce
> Get-JCSystemInsights -systemid $sysid -Table User | ? { $_.Username -like "Administrator" } | ? { ! $_.Suspended }
AdManaged : False
Admin : True
CollectionTime : 2025-01-20T09:21:50.797Z
Description : Built-in account for administering the computer/domain
Directory :
Gid : 544
GidSigned : 544
LastLogin : -1
Managed : False
RealUser : True
Shell : C:\Windows\system32\cmd.exe
Suspended : False
SystemId : <removed>
Type : local
Uid : 500
UidSigned : 500
Username : Administrator
If I run Get-LocalUser on system with id $sysid the Administrator account is not enabled:
Name Enabled Description
---- ------- -----------
Administrator False Built-in account for administering the computer/domain
Expected behavior
I expect the Suspended status returned by Get-JCSystemInsight to be True (as the Administrator account is disabled)
System Device (please complete the following information):
- OS: Windows
- Version: 10
Metadata
Metadata
Assignees
Labels
No labels