HealthCheck - Groups with AdminCount set to 1

[rebelinux]

Description

Add healthcheck condition to check

Groups with AdminCount set to 1 (non-defaults)

$excludedGroups = @(
	'Administrators',
	'DNSAdmins',
	'Domain Admins',
	'Enterprise Admins',
	'Print Operators',
	'Backup Operators',
	'Replicator',
	'krbtgt',
	'Domain Controllers',
	'Schema Admins',
	'Server Operators',
	'Cert Publishers',
	'Account Operators',
	'Read-Only Domain Controllers',
	'Enterprise Read-Only Domain Controllers',
	'Group Policy Creator Owners',
	'Key Admins',
	'Enterprise Key Admins'
)

Get-ADGroup -Filter "admincount -eq '1'" | Where-Object {$_.samaccountname -notin $excludedGroups }

DistinguishedName : CN=SCCM-GMSA,CN=Users,DC=acad,DC=pharmax,DC=local
GroupCategory     : Security
GroupScope        : Global
Name              : SCCM-GMSA
ObjectClass       : group
ObjectGUID        : 7b9b2fea-c08e-4d0d-a71d-182d0698e493
SamAccountName    : SCCM-GMSA
SID               : S-1-5-21-370360276-377477351-3184454278-1104

Additional Context

No response

Before submitting

• I have read the documentation, and referred to the known issues before submitting this change request.
• I have checked for previously opened & closed issues before submitting this change request.