Skip to content

Get-JCSystemInsight -Table User report wrong suspended status #640

@pmxhh

Description

@pmxhh

To Reproduce

> Get-JCSystemInsights -systemid $sysid -Table User | ? { $_.Username -like "Administrator" } | ? { ! $_.Suspended }

AdManaged      : False
Admin          : True
CollectionTime : 2025-01-20T09:21:50.797Z
Description    : Built-in account for administering the computer/domain
Directory      :
Gid            : 544
GidSigned      : 544
LastLogin      : -1
Managed        : False
RealUser       : True
Shell          : C:\Windows\system32\cmd.exe
Suspended      : False
SystemId       : <removed>
Type           : local
Uid            : 500
UidSigned      : 500
Username       : Administrator

If I run Get-LocalUser on system with id $sysid the Administrator account is not enabled:

Name               Enabled Description
----               ------- -----------
Administrator      False   Built-in account for administering the computer/domain

Expected behavior
I expect the Suspended status returned by Get-JCSystemInsight to be True (as the Administrator account is disabled)

System Device (please complete the following information):

  • OS: Windows
  • Version: 10

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions