10-03-2023 10:39 PM
Hi @Shahwaz_Md
Thank you for writing to live community! Yes, you can identify windows user accounts with admin rights however it would require Host Insights License. If you have HI License, you may use "Users to Groups" under Host Inventory locate at Incident Response → Investigation → Host Inventory. User to Groups shows a list mapping of all the users, local and in your domain, to the existing user groups on an endpoint. And you may filter Group names by "Administrator" to look for users with Admin rights.
For details you may check under here
Hope this helps!
Please mark the response as "Accept as Solution" if it answers your query.
