The User List Tool

The User List Tool helps you audit user accounts in Windows against a authoritative list. This tool has two modes:

• Format - Cleans the lists into a readable format
• Compare - Compares the ReadMe list with the machine's actual users and administrators

This post will serve as a guide on how to use the tool.

Both the formatter and comparer have 4 fields:

• Exclude Users - Default users to exclude/ignore. It is not recommended to change this unless you know what you're doing
• ReadMe List - User list in the ReadMe
• Machine Users - The Machine's users, can be obtained using net users in command prompt/powershell
• Machine Admins - The Machine's administrators, can be obtained using net localgroup Administrators in command prompt/powershell

ReadMe List

The list that you should copy should look like the following:

Authorized Administrators:
miku (you)
    password: niNApr0je(t
fang
	password: securepassword
jet
	password: P@SsW0!rD#

Authorized Users:
gazula
bumi
phantom
teto

You must include Authorized Administrators and Authorized Users

Machine Users

In order to obtain the machine users, open command prompt:

1. Press the Windows key
2. Type Command Prompt and open it
3. Type net users and press enter
4. Copy every line after the set of dashes (------) and stop before This command completed successfully.

Using the output of the image above, the text you would copy is:

Administrator            DefaultAccount           Guest
Martin                   WDAGUtilityAccount        SophosSAUMARTIN-PC0
test					 test2

Machine Admins

Obtaining the machine admins is the same as getting the users, but instead of running net users, you run net localgroup Administrators

Given the image above, the text you would copy is:

Administrator
Groovy
Sarah