Discovery - Retrieve the local accounts on windows server.

CharanpreetK · ‎08-19-2025

Has anyone worked on retrieving the local accounts from windows server. The accounts are non-human accounts which might be in active directory or created locally on the server to execute services for third party apps or local services on the servers. The accounts needs to be retrieved from windows server and not from active directory.

CharanpreetK · ‎08-21-2025

Hi Ram,

The use case is to retrieve the accounts (local and non-human) on the windows server and populate in one of the CMDB table, to be specific, below are the accounts to be retrieved.

1. Accounts executing window services(available as OOB Window-services probe ) - solved.

2. Accounts executing scheduled tasks - I created an extension on windows OS servers pattern with the Parse command output step using the command - "powershell.exe Get-ScheduledTask -TaskPath \ ^| Export-ScheduledTask"

3. Accounts running IIS application pools - there is OOB probe, getIIS information, however it does not provide the runasaccount information - need to cutomize the probe or extend the pattern to retrieve the account executing IIS Application pool

@Ram Devanathan1 I will be submitting this on the idea portal as it seems to be a good to have feature and can be achieved through powershell or Win32 classes.

Thanks,

Charanpreet

View solution in original post

CharanpreetK · ‎08-21-2025

Will these retrieve only the administrative accounts.

doug_schulze · ‎08-21-2025

Yes, as that was the request at the time, you can adapt it to get all users.