how to find out what services are using domain admin account

we looking chnage domain admin account password. there way find out in domain services on server running wih domain admin account user , password?

just in case did install service , using domain admin account. how can find out?

have edited security policy of each system audit account logons, can done security template or group policy object deployment.

 here's instructions gpo deployment of windows event subscriptions.

http://msdn.microsoft.com/en-us/library/aa384372(vs.85).aspx

you can track in event viewer see if theres logins using domain admin credentials. can delegate client or server host subscription event log. can use instructions below set manually.

to configure windows vista or windows server 2008 machine pull events server core machine need perform following steps:

1. on collector computer, run event viewer administrator.
2. click subscriptions in console tree.
3. click add subscription in actions menu.
4. in subscription name, type name subscription.
5. in description, provide optional description.
6. in destination log, select log file collected events stored. default, collected events stored in forwardedevents log.
7. click add , select computers events collected.
8. click select events display query filter dialog box. use controls in query filter dialog box specify criteria events must meet collected.
9. click ok on subscription properties dialog box. subscription added subscriptions pane and, if operation successful, status of subscription active.

then setup the subscription service on each system command.

winrm quickconfig

pstools can make easy in batch script execute on many machines remotely. http://technet.microsoft.com/en-us/sysinternals/default.aspx

psexec \\server "winrm quickconfig"

---

steve kline
microsoft certified professional: server administrator
microsoft certified product specialist
microsoft certified network product specialist
posting "as is" without warranties , confers no rights.

Windows Server  >  Windows Server General Forum