Find which account a service is set to “Log On As”

Question

How to find out the user account (Local System/User etc) a service is set to run under ("Log On As")?

Unlike this similar question this code can't run from within the service itself and the service may not be running.

The System.ServiceProcess.ServiceController class has useful methods for getting the status but not the "Log On As" user.

Answer 1

This is the only way I know of, I found it looking around and tested it, it works. Make sure you use the Service Name not it's Display Name, you will also need to add a reference to System.Management

string serviceName = "aspnet_state";

SelectQuery query = new System.Management.SelectQuery(string.Format(
    "select name, startname from Win32_Service where name = '{0}'", serviceName));
using (ManagementObjectSearcher searcher =
    new System.Management.ManagementObjectSearcher(query))
{
    foreach (ManagementObject service in searcher.Get())
    {
        Console.WriteLine(string.Format(
            "Name: {0} - Logon : {1} ", service["Name"], service["startname"]));
    }
}

Answer 2

How about using WMI and the Win32_Service class with the StartName parameter?

This article might help.

Answer 3

This will do your Job

 Get-WMIObject Win32_Service | Where-Object {$_.startname -ne "localSystem" }| Where-Object {$_.startname -ne "NT AUTHORITY\LocalService" } |Where-Object {$_.startname -ne "NT AUTHORITY\NetworkService" } |select startname, name