Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 228
  • Last Modified:

How can I find out what accounts are running what services across my windows 2k3 domain?

Following an outbreak of conficker my client has restricted access to launch exe as services and the like.  Upon relaxing the security we are finding that certain services are not lauching eg dhcp client.  This is down to permissions I know however I would like to find out what accounts are associated to what services as we have serveral instances where the same service is local system on one machine and network service on another
0
nashton99
Asked:
nashton99
  • 4
  • 4
1 Solution
 
sda100Commented:
This batch script below will give you the information you need - I've chosen to just echo the information out in CSV format, but you can do what like with it.

You'll be using the Windows-supplied tool, SC.EXE and you'll also need to use a .VBS script which you can download from here (extract it from the ZIP):

Sample output:

WZCSVC, Wireless Zero Configuration, AUTHORITY\NetworkService
xmlprov, Network Provisioning Service, AUTHORITY\NetworkService
SAVService, Sophos Anti-Virus, AUTHORITY\LocalService
SAVAdminService, Sophos Anti-Virus status reporter, AUTHORITY\LocalService
Steve :)

@echo off
SetLocal EnableDelayedExpansion
for /f "tokens=1,*" %%i in ('cscript //NoLogo check_service.wsf /info') do (
    if "%%i"=="Service:" (
        set ShortName=%%j
    ) else (
        if "%%i"=="Description:" (
			set LongName=%%j
			for /f "usebackq tokens=4" %%k in (`sc qc !ShortName!^|find "SERVICE_START_NAME"`) do (
				set StartName=%%k
			)
			echo !ShortName!, !LongName!, !StartName!
        )
    )
)

Open in new window

0
 
nashton99Author Commented:
Thanks have downloaded and will give it a try, I am not much of a vbs programmer, so may need some more help.  Does anyone know of anything  that has a nice gui
0
 
sda100Commented:
You don't need to touch the VBS.  If you look at line 12 of the code snippet above (it's a DOS batch file), I echo out 3 values.  It's up to you what you want to do with them... anything tricky, just post back again.

Steve :)
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
nashton99Author Commented:
thats great and I can run it fine, but what i would really like to do is run it from a client aqnd check all servers on, the domain and then produce a report, any further tips would be greatly appreciated.  
0
 
sda100Commented:
Depending on how many servers you have, I think the easiest way might be to use a GPO and configure it to run as a login script (for Administrator?).  You could then adapt the batch file to copy its output to a network share, in a file named %COMPUTERNAME%.TXT, for example?

Take a look at the modified batch file below.

Steve :)

@echo off
SetLocal EnableDelayedExpansion
 
set NetworkDir=\\<SERVER>\<SHARE>
 
for /f "tokens=1,*" %%i in ('cscript //NoLogo check_service.wsf /info') do (
    if "%%i"=="Service:" (
        set ShortName=%%j
    ) else (
        if "%%i"=="Description:" (
            set LongName=%%j
            for /f "usebackq tokens=4" %%k in (`sc qc !ShortName!^|find "SERVICE_START_NAME"`) do (
                set StartName=%%k
            )
            echo !ShortName!, !LongName!, !StartName!>>"%0.out"
        )
    )
)
 
if exist "%0.out" (
    move "%0.out" "%NetworkDir%\%COMPUTERNAME%.txt"
    del "%0.out"
)

Open in new window

0
 
sda100Commented:
You could also play with the PsTools package from Microsoft/Sysinternals to run this remotely.

Steve :)
0
 
nashton99Author Commented:
Thanks again steve been out of the office today but will have a play over the weekend with pstools and the batch file etc.  But I am liking the idea.
0
 
nashton99Author Commented:
Really basic auditing sorting thank you.  Simple, effective and fast solution
0

Featured Post

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

  • 4
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now