What program can detect local groups on a CD in a domain?

Question

System administration

Good afternoon!
Faced the task of scanning domain controllers and computers for the presence of the local group "Domain Admin" on machines running Windows XP, Windows 7, Windows 10, Windows Server 2000/2008R2/2012. But having searched in the vastness of the vast, I did not find anything suitable, and I myself could not formulate the request correctly.
Please tell me the program or the possibility of doing this at all!
There are about 5000-6000 machines, there is no way to manually break each one under the local "AD" group.
Thanks in advance!)

Answer 1

10-strike

Answer 2

1 - it is unlikely that there is a separate program for this task, although it is possible that a suitable feature can be found in programs for administration / inventory / helpdesk
2 - master scripting in general, and wmi queries in particular. and your task will immediately cease to seem so frightening
3 - but in general, it seems that existence

local group "Domain Admin"

doesn't make sense. even if someone created such groups by hand, they still do not give their members any real rights to domain objects