GetLocalUser

Get-LocalUser is a PowerShell cmdlet used to retrieve local user accounts on the computer. It is part of the Microsoft.PowerShell.LocalAccounts module and is commonly employed for scripting local account management without relying on Active Directory.

The command returns objects that represent local accounts. Key properties include Name, Enabled, Description, and SID, which enable scripts to assess account status and metadata. The output can be filtered and manipulated using standard PowerShell techniques, such as piping to Where-Object or Sort-Object.

Usage examples illustrate common tasks: Get-LocalUser lists all local accounts; Get-LocalUser -Name 'Alice' retrieves a specific user; Get-LocalUser | Where-Object {$_.Enabled -eq $true} lists enabled accounts. These patterns support auditing, reporting, and automation workflows.

Compatibility and scope: The cmdlet is available on Windows PowerShell 5.1 and PowerShell 7 implementations via the LocalAccounts module. It does not enumerate domain or directory accounts; for those, domain-specific cmdlets such as Get-ADUser are used.

Limitations: Get-LocalUser operates on the local computer and requires appropriate permissions according to local security policies. In some environments the LocalAccounts module may need to be installed or imported with Import-Module.

See also: Set-LocalUser, New-LocalUser, Remove-LocalUser, Get-LocalGroup, Net user.