Get-LocalUser

Enumerate local user accounts.

Windowspassive

Get-LocalUser lists local accounts with enabled state and last-logon info — quick recon/hardening on Windows hosts.

Syntax

Get-LocalUser

Example

Get-LocalUser | Where-Object Enabled -eq $true

Lists all enabled local accounts on the machine.

Advantages
  • Instant local account inventory
  • Object output for filtering
  • Built-in
Disadvantages
  • Local accounts only (not AD)
  • Windows-only
  • Needs rights to see all
Tags
#windows#users#enumeration

Official docs: Get-LocalUser

Related commands

Frequently asked questions

What is Get-LocalUser used for?
Get-LocalUser lists local accounts with enabled state and last-logon info — quick recon/hardening on Windows hosts.
What is an example Get-LocalUser command?
A common example is: Get-LocalUser | Where-Object Enabled -eq $true — Lists all enabled local accounts on the machine.
Is Get-LocalUser part of a standard install?
Get-LocalUser runs on Windows. It is typically available by default.
What category of security tool is Get-LocalUser?
Get-LocalUser is a PowerShell tool with a passive-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →