Windows Server: Service Accounts
submitted
K
Kyle Morkel
A long query and possibly could be optimized.Useful for finding accounts being used to run services
Services[?ServiceAccount==
true
&& !contains(ServiceAccountName, NT AUTHORITY
) && !contains(ServiceAccountName, NT Authority
) && !contains(ServiceAccountName, localSystem
)&& !contains(ServiceAccountName, NT SERVICE
)&& !contains(ServiceAccountName, NT Service
)].join( ,
, [join(:
, [Service Account
, to_string(ServiceAccountName)]), join(:
, [Service
, to_string(DisplayName)])])