Need to create a smart group: Find computers that don't have the local admin FV2 Enabled

[woodsb]

Hello does anyone know how to create a smart group that finds machines that don't have the local admin enabled for FV2? I need to grant secure tokens to these machines through self service.

[donmontalvo]

Do you mean Local Admin Account or your Management Account?

[woodsb]

@donmontalvo We use local admin accounts to support users.

[mpuyet]

If you've the same local admin on all your Mac, or just few different admin member account, you can use the native criteria SmartGroup "FileVault 2 User".

If you don't know all local admin, it's possible to create a Extension Attribute linked to a script getting admin group members names and return a YES/NO after check if one of all local admin is used in FV2