Vous pouvez use this powershell script to return le users that have an adminCount greater than 0, qui means that they are affected by le adminSDHolder feature.
You'll need le AD Module for PowerShell installed, qui comes avec RSAT.
import-module activedirectory
get-aduser -Filter {admincount -gt 0} -Properties adminCount -ResultSetSize $null
