# Local Administrators Widget

> A new Security Monitor widget shows which local administrator accounts and groups on your endpoints are not approved.

Source: https://docs.capaone.com/capaone/changelog/2026-09-21-local-administrators-widget/  
Product: CapaOne — a separate CapaSystems product; do not apply this page to any other.

![The Local Administrators widget showing 94% of endpoints compliant, one unapproved admin, and six orphaned accounts](../../../../assets/changelog/2026-09-21-local-administrators-widget-1.png)

Security Monitor now shows which local administrator accounts and groups exist on your endpoints —
and which of them nobody approved.

You define the accounts and groups that belong there. Security Monitor checks every endpoint against
that list and does the rest:

- **Unapproved admins** — accounts or groups holding local administrator rights that are not on your
  list
- **Orphaned accounts** — local accounts whose user no longer exists

The widget shows how many of your endpoints are compliant, so you can see the whole fleet at a
glance and go straight to the ones that are not.