Windows Server Service startname report

[Sleezel]

I have recently taken over a new environment that is is bad shape. In order to get a handle on service accounts, I want to run a report showing all services on servers and what logon name they are using. I can then sort these and pick out all the ones NOT running under localservice. I can view this in LanSweeper on a server by server basis so I know the info is in the DB.

[Sleezel]

Thank you VERY much sir. That was awesome of you.

[Tom_P · Accepted solution]

Lansweeper stores data about the scanned services in the following tables:

• tblServices
  
• tblServicesStartMode
  
• tblServiceState
  
• tblServicesUni

The report below will show you the name of the server, the scanned services and the account that is used to run the service. Additional columns or filters can of course be added.

Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetUnique,
  tblAssets.Domain,
  tsysOS.OSname,
  tblAssets.Description,
  tblComputersystem.Lastchanged,
  tsysOS.Image As icon,
  tblServicesUni.Caption,
  tblServicesUni.Name,
  tblServicesUni.Startname
From tblComputersystem
  Inner Join tblAssets On tblComputersystem.AssetID = tblAssets.AssetID
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysOS On tblAssets.OScode = tsysOS.OScode
  Inner Join tblServices On tblAssets.AssetID = tblServices.AssetID
  Inner Join tblServicesUni On tblServicesUni.ServiceuniqueID =
    tblServices.ServiceuniqueID
Where tblAssetCustom.State = 1 and tblComputersystem.Domainrole > 1
Order By tblAssets.AssetName

[AZHockeyNut]

there is a canned report called Services: Non Standard Accounts that might be close to what you want.