Forum Discussion
Trying to find Service accounts
What have you tried?
This should get you started:
Get-ADServiceAccount - Filter * -SearchScope Subtree
This will grab all the service accounts in your domain.
Your AD domain's distinguished name can be obtained from:
(Get-ADDomain).DistinguishedName
Thanks for the reply - where would the Distinguished name fit into the command? Lets say my distinguished name is DC=Contoso, DC=Com
The distinguished name can be used in the cmdlet like so:
Get-ADServiceAccount -SearchBase (Get-ADDomain).DistinguishedName
The -SearchBase parameter accepts a distinguished name syntax e.g. "CN=blah, OU=blah, dc=domain, dc=domain" This provides a means of targeting your search at a know starting point instead of the entire directory.
Use the -SearchScope parameter to specify how deep the search should go; Base, OneLevel, Subtree
Ex: Get-ADServiceAccount -Filter * -SearchScope Base
Ex: Get-ADServiceAccount -SearchBase (Get-ADDomain).DistinguishedName -SearchScope Base
Ex: Get-ADServiceAccount -Filter * -SearchScope Subtree
Ex: Get-ADServiceAccount -SearchBase (Get-ADDomain).DistinguishedName -SearchScope Subtree
Note the results.
Review the documentation here:
https://docs.microsoft.com/en-us/powershell/module/addsadministration/get-adserviceaccount?view=win10-ps
https://docs.microsoft.com/en-us/powershell/module/addsadministration/get-addomain?view=win10-ps