Need to find out which services are running as domain administrator account on all of our servers

Posted on 2011-10-24
Last Modified: 2012-05-12
We have a mix of windows 2003 and 2007 servers. They all belong to a domain. Does anyone know of a tool that I can use to find out which services on our servers are being run as that administrator account? I'd like to avoid having to touch each individual server if possible.
Question by:J C
    LVL 23

    Expert Comment

    You can get and run dumpsec:

    From a command line you could do something like:

    dumpsec /computer=COMPUTERNAME /rpt=services /saveas=csv

    If you want to use an input file with computer names you would need a for loop such as:

    for /f "delims=;" %%a in (c:\servers.txt) do c:\dumpsec.exe /computer=\\%%a /rpt=services /saveas=csv /outfile=c:\%%a.txt & copy /a c:\output.txt + c:\%%a.txt c:\output.txt & del c:\%%a.txt

    Hope that helps.
    LVL 10

    Expert Comment

    Damwere Utilities is very powerful tools, it does tell you what services are running on which computers and under which user accounts. It does much more than this as well. I have always found it to be a great utility program.

    Author Comment

    by:J C
    Would I have to look at each individual server or can it run a query against all of my server's and report which services are running as "administrator"
    LVL 57

    Accepted Solution

    There was a similar question this week that you may want to check out

    ***Full Disclosure**** Haven't tested the script myself.



    Featured Post

    Why You Should Analyze Threat Actor TTPs

    After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

    Join & Write a Comment

    I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
    Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
    This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
    This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…

    732 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now