how to list service accounts used to start services on a windows 2012 r2 server

Question

I need to document which services on my Windows 2012 R2 and Windows 2016 servers have service accounts starting them. I do not want to log into hundreds of servers and manual gather this information. There has got to be a better way. Do you know how I accomplish this task?

Answer 1

Hello,

Your best option for your request will be to use PowerShell and Active Directory Module, below an example of what you can do :

$Computers = Get-ADComputer -Filter * -properties OperatingSystem | Where-Object {$_.OperatingSystem -like "*server*"}
$colObj = @()
foreach($Computer in $Computers) {
    try {
        $services = Get-WmiObject win32_service -computername $Computer.Name -ErrorAction Stop
        foreach($service in $services) {
            $hash = @{
            computerName = $Computer.Name
            serviceName = $service.name
            account = $service.startname
            startmode = $service.startmode
            }
            $exportObj = New-Object PSObject -Property $hash
            $colObj = $colObj + $exportObj
        }
    }
    catch {
        Write-Output "Could not request service"
    }
}

Write-Output $colObj

Note : It can be improved but at least you have materials to start your documentation

Regards,

Answer 2

Hello @DK Bridges

you can use powershell to get the information you are looking for:

Get-ADServiceAccount
https://learn.microsoft.com/en-us/powershell/module/activedirectory/get-adserviceaccount?view=windowsserver2019-ps

Hope this helps with your query!

----
--If the reply is helpful, please Upvote and Accept as answer--