Recommendations for a script to query accts used to logon services?

[Mike Leone]

I need to find out a list of what accts are being used to run various
services on a bunch of my servers. While I can (and have) searched for
such a script, I'm more inclined to trust the opinions of the folks
here, as to which would be a good one to use.

Basically, over the years we've used AD user accounts to run various
services on different machines, and I'd like to know what and where.
And then maybe start replacing them with Group Managed Service
Accounts, if possible. :-)

Do you have such a script or utility that you use for this purpose?

--

Mike. Leone, <mailto:tur...@mike-leone.com>

PGP Fingerprint: 0AA8 DC47 CB63 AE3F C739 6BF9 9AB4 1EF6 5AA5 BCDF
Photo Gallery: <http://www.flickr.com/photos/mikeleonephotos>

[Michael B. Smith]

You want a minimal solution? Or a maximal solution? 😊 I got'em both.

--

You received this message because you are subscribed to the Google Groups "ntpowershell" group.

To unsubscribe from this group and stop receiving emails from it, send an email to ntpowershell...@googlegroups.com.

To view this discussion visit https://groups.google.com/d/msgid/ntpowershell/CAHBr%2B%2BgHXfGfUJk9qWrrHSgCuc8HSHhtrvbnp9km3aZ4m3Y8hQ%40mail.gmail.com.

[Kurt Buff]

Our very own Carl Webster had (still has, I hope) one on his web site.

Take a look there - I have a copy from 2017 if it's not there any longer.

Kurt

[Michael B. Smith]

The version from 2017 is my “minimal” solution.

 

The version from 2021 is my “maximal” solution.

 

Web has retired and is no longer developing any of his scripts. I don’t think he’s even hosting the website anymore, but I’m not certain of that. I have “owner” permissions on his github if anyone wants to submit a patch to anything.

To view this discussion visit https://groups.google.com/d/msgid/ntpowershell/CADy1Ce7L94MZ3k9YUQ3%3D%2BXrwpzF-6pseVn5YUxNwotRpU2Daew%40mail.gmail.com.

[Kurt Buff]

Retired? Good for him. Definitely one of the good guys.

Kurt

To view this discussion visit https://groups.google.com/d/msgid/ntpowershell/a6a316a70e9f4a20bcd7c2a1f545c2a0%40smithcons.com.

[Andrea 'ML' Suatoni]

Try this. We use many of their tools, the free versions may suffice
eventually:

https://cjwdev.com/Software/ServiceCredMan/Info.html

Andrea

[Mike Leone]

Thanks! For this purpose, a minamil might be enough. What I need to do
is identify those accts (so we can flag them to be replaced later. And
also, those AD accounts are sometimes in other AD groups that are used
for NTFS security. And so I might need to adjust those memberships,
too.

Of course, a max solution wouldn't go amiss, either. LOL

> To view this discussion visit https://groups.google.com/d/msgid/ntpowershell/4cf1d704e6e14803a6a7c9413eb2557b%40smithcons.com.

[Michael B. Smith]

I've attached three different versions as text files. I think those are allowed.

Check-Services is definitely the minimalist version. The other two expand on it dramatically.

-----Original Message-----
From: ntpowe...@googlegroups.com <ntpowe...@googlegroups.com> On Behalf Of Mike Leone

Sent: Monday, June 2, 2025 3:41 PM
To: ntpowe...@googlegroups.com

To view this discussion visit https://groups.google.com/d/msgid/ntpowershell/CAHBr%2B%2Bg6FUKO1F9kHD-qSziZt1%3DLfhwRXWiKUCCa0YCVU%3DiX6g%40mail.gmail.com.

[Kurt Buff]

Attachments came through.

Kurt

To view this discussion visit https://groups.google.com/d/msgid/ntpowershell/b4016b8edcf14766894f5d515d66293a%40smithcons.com.