Script to list all local accounts on each ESXi host for security checking

[firestartah]

Hi,

Is there a script or command i can run against my environment to prove to the security team for audits that only permissable accounts are added to the ESXi hosts?

Gregg

[firestartah]

nevermind i found the solution in another thread:

$user = "root"
$pswd = "password"

Get-VMHost | %{
  $esx = Connect-VIServer $_.Name -User $user -Password $pswd
  Get-VMHostAccount -Server $esx |
  Select @{N="Host";E={$esx.Name}},@{N="Uid";E={$_.ExtensionData.Id}},Id,@{N="Name";E={$_.ExtensionData.FullName}}
  Disconnect-VIServer -Server $esx -Confirm:$false
}

[green0tree22]

Hi Firestartah.

Is this also applicable in vcenter? if not, how can i query the localaaccount in vcenter and check the status of acount and last password change?

i dont know how to check it using powercli

thanks