Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

How can I tracking down services that use the administrator account to start

Posted on 2006-04-21
4
Medium Priority
?
179 Views
Last Modified: 2010-04-18
Hello all,
Last night I changed the admin password for our network. Everything went pretty smoothly. I restarted our Exchange 03 and SQL 2000 machines, and found the services that start using the admin password. After making the changes they all seem to run great.
I have 19 2003 servers total. All doing different functions from FTP to Antivirus and everything in between. My question is this: Is there a way to find what services start using the admin user account without waiting for them to fail? A 3rd party tool to do this? I would like to be a little proactive in tracking down these services, but I don't want to look at the properties for each and every service on 19 servers. Any ideas?
Thanks in advance,
Craig
0
Comment
Question by:14100
  • 2
4 Comments
 
LVL 4

Accepted Solution

by:
Nat_c earned 1050 total points
ID: 16506662
you can use the mmc (start, run, mmc)

then;

File, "add/Remove Sanp-in..."
Click Add
scroll to "services", click "add"
Select "Another Computer" and either type the name or browse for it, click "finish"
Repeat this for all 19 servers

When returning back to the mmc (close, cancel) you will see a list of servers in the left pane

Ensure that the window is maximised and choose the first sever in the list on the left

Sort the "Log on as" column by name and any servers logging on as the administrator should be listed at the top.

Maybe not the best solution but shouldn't take too long and you will be able to amend any problem services from this view too.

Hope this helps,
Nat
0
 

Expert Comment

by:InGeniousIT
ID: 16513732
Hi Craig
I am not aware of a shorter way than this or the previous post but it is very simple to determine which services are using the admin log on,
(which incidentally is a HUGE security no no)

 this is similar to previous postings but hopefully clearer

On any server, click  Start\Programs\Administrative tools\Services (I usually put this shortcut on the desktop for management purposes)
This which will open the MMC, then  sort by "Log on As"

You can identify each services' credential, then alter the password for any using the admin account
To switch to another server simply right click on services in the top left pane and "Connect to another computer" browse and select

I would stongly recommend setting up an account with minimal privilages to allow the relevent service to work as required,rather than using Admin.
0
 

Author Comment

by:14100
ID: 16524722
Thanks guys. That would minimize some of the work tracking down these services. I 'm going to check into creating a new account right away to remove the admin account from any services.
Thanks again
0
 
LVL 4

Expert Comment

by:Nat_c
ID: 16524870
Thanks for the points, glad I could help!

I admit that my way was slightly more long winded but my thoughts were that if you create a console as I outlined above you can then save it.

You can then, as a a temporary measure, update the administrator password for any accounts not running and then (as suggested by InGeniousIT) find out which various services you need to create accounts for and then come back to the saved console to change the accounts without having to connect to the services console of each server again.

Good luck with it all.

Nat
0

Featured Post

Configuration Guide and Best Practices

Read the guide to learn how to orchestrate Data ONTAP, create application-consistent backups and enable fast recovery from NetApp storage snapshots. Version 9.5 also contains performance and scalability enhancements to meet the needs of the largest enterprise environments.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Is your data getting by on basic protection measures? In today’s climate of debilitating malware and ransomware—like WannaCry—that may not be enough. You need to establish more than basics, like a recovery plan that protects both data and endpoints.…
Despite its rising prevalence in the business world, "the cloud" is still misunderstood. Some companies still believe common misconceptions about lack of security in cloud solutions and many misuses of cloud storage options still occur every day. …

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question