Hunting system admins with Powershell/WMI