Support for localized Administrator name in Remediate.ps1

[lucafabbri365]

Hello,
it would be useful to have support to localized Administrator name (Administrateur, Administrador, etc.) in Remediate.ps1 when different "base" OS language versions are in use.
So instead of having:

# Define the local administrator user name
$LocalAdministratorName = "<Enter the name of the local administrator account>"

# Construct the required URI for the Azure Function URL
$SetSecretURI = "<Enter Azure Functions URI for SetSecret function>"
$SendClientEventURI = "<Enter Azure Functions URI for SendClientEvent function>"

it could be:

# Define the local administrator user name
$LocalAdministratorName = ""

# Select to use default local administrator
$UseDefaultAdministrator = $true
	  
if ($UseDefaultAdministrator){
	$LocalAdministratorName = (Get-LocalUser | Where-Object {$_.SID -like "*-500"}).Name
	Enable-LocalUser -Name $LocalAdministratorName
}

# Construct the required URI for the Azure Function URL
$SetSecretURI = "<Enter Azure Functions URI for SetSecret function>"
$SendClientEventURI = "<Enter Azure Functions URI for SendClientEvent function>"

What about ?

[NickolajA]

This sounds like a great idea. Has it been tested on your end?

[SasStu]

Hi, I am using this function quite regularly to enumerate local security principals by SID.

Get-LocalPrincipal

[lucafabbri365]

Hello @NickolajA,
sorry for the late reply.
Yes, I have implemented the proposed changed in production long time ago (more than 3 months ago).

Bye,
Luca