How to discover the user account in Windows Services

[joazes]

Hi all,
Is there a way to know what's the user account did start some service from command line?
Thanks in advance.

 

[elmurado]

Eventviewer;
Source will be Service Control Manager and User will be the User. Event ID : 7035 or 7036

 

[58sniper]

Your question is a little ambiguous. Are you trying to find:
1. What user used the command line to start a service

or

2. From the command line, can I tell what account is configured in a service?

If it's #1, then Elmurado's answer should suffice. If it's #2, then you could probably use sc.exe to query the service.

Pat Richard
Microsoft Exchange MVP
Contributing author Microsoft Exchange Server 2007: The Complete Reference

 

[joazes]

Hi 58sniper!!!
The second option is my problem. I already tried to use the sc.exe command, but it is not enough. Is there any new idea??
Tks

 

[elmurado]

I tried to see if there was something in WIN32_Services that would cough up this info but there doesn't seem to be.
I found this though;

http://www.devnewsgroups.net/group/microsoft.public.dotnet.framework/topic16952.aspx

Don't know if it's much use to you.