Very few (of the sites I go to) ever look at the privileged accounts. The last assessment I did had over 100 DA accounts and almost as many EA and SA accounts. The majority of their service accounts were in all three groups!!! Until I ran MBS’ script, they had no idea how many local SQL Server and SQL Express installs had been done using the domain’s SQL Service account and that account was a member of all three privileged groups.
Webster From: [email protected] [mailto:[email protected]] On Behalf Of Free, Bob Sent: Thursday, October 03, 2013 11:52 PM To: [email protected] Subject: [NTSysADM] RE: Account Utility The first two I get, the third is really hard to comprehend. From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Webster Sent: Thursday, October 03, 2013 8:09 AM To: [email protected]<mailto:[email protected]> Subject: [NTSysADM] RE: Account Utility MBS’ script works like a charm. I have used it when doing assessments for AD migrations. I have NEVER seen an IT org that knew every service account used, where they were used or how many of those service accounts had domain admins privileges. Webster From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Michael B. Smith Sent: Thursday, October 03, 2013 11:00 AM To: [email protected]<mailto:[email protected]> Subject: [NTSysADM] RE: Account Utility http://theessentialexchange.com/blogs/michael/archive/2008/02/29/finding-services-using-non-system-accounts-with-powershell.aspx From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Steve Norton Sent: Thursday, October 3, 2013 8:10 AM To: [email protected]<mailto:[email protected]> Subject: [NTSysADM] Account Utility A long time ago I used a utility that showed me what account services were running under on all my servers. My environment is Windows 2003 and 2008 R2. Ideally this would be a utility that I can run from a Windows 7 workstation against servers. Suggestions appreciated. ________________________________ PG&E is committed to protecting our customers' privacy. To learn more, please visit http://www.pge.com/about/company/privacy/customer/ ________________________________
