Skip to main content

cPVAL Domain Admin Users

Summary​

Lists every user account with Domain Admin rights, including accounts that get the rights through nested groups. Use it to review who can administer the domain and to spot stale or unused admin accounts. The Active Directory - Users with Domain Admin Audit automation fills this field, and the Active Directory - Users With Domain Admin report collects it from every client.

note

Only the primary domain controller fills this field. It stays empty on every other device.

Details​

LabelField NameExampleDefinition ScopeTypeRequiredDefault ValueDropdown OptionsEditableCustom Field Tab
cPVAL Domain Admin UserscpvalDomainAdminUsersHTML tableDeviceWYSIWYGFalse--YesDomain Admin Report

Table Columns​

The field holds a table with one row per account.

ColumnDescription
AccountNameThe sign-in name of the account.
DomainAdminAlways Yes. Every listed account has Domain Admin rights.
DomainThe name of the Active Directory domain.
NameThe display name of the account. Blank when not set.
EmailThe email address of the account. Blank when not set.
AccountEnabledEnabled or Disabled.
AccountExpirationThe date the account expires, or No Expiration.
LastLogonThe most recent sign-in, or Never. It can trail the real sign-in by up to 14 days when another domain controller handled it.
DaysSinceLastLogonDays since the last sign-in. Blank when the account never signed in.
PasswordExpiresNever Expires, Must Change at Next Logon, Expires: <date> or Expired: <date>.
PasswordLastSetThe date the password was last changed, or Never.
DaysSinceLastPasswordChangeDays since the password was last changed. Blank when it was never set.
DataCollectionDateWhen the data was collected.

Dependencies​

Custom Field Creation​

Sample Screenshot​

Image1

Changelog​

2026-10-14​

  • Initial version of the document