Search notes:
S-1-5-32-544
S-1-5-32-544 is the well known SID for the group of local adminstrators (BUILTIN\Administrators
)
This sid can be used to check if a Powershell session has elevated privileges:
[Security.Principal.WindowsIdentity]::GetCurrent().Groups -contains 'S-1-5-32-544'