Re: Identifying Service Accounts



the core logic in VBscript/WMI would run

loop on each sHostName
Set oSvcs = _
GetObject("winmgmts:{impersonationLevel=impersonate}!//" &
sHostName).InstancesOf("Win32_Service")
' error check / handle
For Each oSvc In oSvcs
sSvcName = oSvc.Name
sSvcAccount = oSvc.StartName
' test: has this service account been seen before - record new if not
Next
end host loop

--
Roger Abell
Microsoft MVP (Windows Server : Security)

<itreman@xxxxxxxxxxx> wrote in message
news:1133981136.373779.40220@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> As part of our annual E&Y audit, we have been told to make changes to
> the accounts that are service accounts (i.e. change their AD name,
> password, delete them, create new ones, etc). Well, easy for them to
> say! I first need to identify all the service accounts on all of our
> servers. How do I do that? The ADMT tool assumes NT to 2K. I tried to
> use it from domain A to domain A, but it doesn't like that. There's got
> to be another tool that isn't tied to migrations that will work for
> this purpose. Any ideas would be greatly appreciated. Thanks!
>


.