This category of reports provides details about local accounts on each computer as well as the membership of each local security group. This is particularly useful when performing a security audit of all computers within your Configuration Manager environment.
Once this category of reports is installed, you can also create a collection with all of the computers that have a specific local account or are members of a particular group. This is useful if you want to use Configuration Manager to remove or change an account or group. Please see Creating Configuration Manager Collections for more details.
Note: Due to the size of data on a Domain Controller, it will not be inventoried and, therefore, it will NOT report any data within these reports. However, Domain Controllers will be inventoried by the Configuration Manager Active Directory (AD) discovery tasks.